Page 1 of 3

WebKit 3.30-3.36

Posted: Wed Apr 22, 2015 2:57 pm
by xyz
Since this was patched by Sony in 3.50 there's probably no reason to hold onto it anymore.

The vulnerability used is CVE-2014-1303 which was discovered by Liang Chen of Keen Team. You can read about it more here:
https://www.blackhat.com/docs/eu-14/mat ... Not-WP.pdf
https://www.blackhat.com/docs/eu-14/mat ... Or-Not.PDF

The archive contains vitasploit ported to 3.36. Other firmwares will not work. The exploit itself works on all PS Vita systems with firmware versions 3.30-3.36.

Mirror: http://a.pomf.se/genwgz.zip
vitasploit-33x.zip
(62.67 KiB) Downloaded 5236 times

Re: WebKit 3.30-3.36

Posted: Wed Apr 22, 2015 3:22 pm
by yeeeeeeee
This is great to hear! Made the mistake to update from 3.18 for I don't know what reason...

Re: WebKit 3.30-3.36

Posted: Wed Apr 22, 2015 3:31 pm
by Hykem
We've been holding on to this exploit for a while now and I was hoping Sony would let it slip in 3.50. Still, it's a very interesting exploit and it's likely that it works on other devices (PS4 before 2.50, of course).
I'm going to add xyz's port for 3.36 to the vitasploit repository, which will now have two separate exploit methods. If anyone has a 3.30 or 3.35 unit and would like to mess around with WebKit, just let me know so I can port it to those firmware versions as well.

By the way, in addition to the PDF from blackhat that xyz linked to, there's also this:
https://cansecwest.com/slides/2015/Lian ... st2015.pdf

Those are the slides from Keen Team's Liang Chen's presentation at CanSecWest. Three different vulnerabilities are described in detail and it's definitely a good read.

Re: WebKit 3.30-3.36

Posted: Wed Apr 22, 2015 3:41 pm
by JaxxBlaxx
Wow, I was not expecting this... Thanks and good job to everyone who helped port this!

Re: WebKit 3.30-3.36

Posted: Wed Apr 22, 2015 4:27 pm
by wololo
Nice work

Re: WebKit 3.30-3.36

Posted: Wed Apr 22, 2015 4:31 pm
by The Z
Sweet. So 3.36 is the new "best FW" :P

Re: WebKit 3.30-3.36

Posted: Wed Apr 22, 2015 4:34 pm
by yifanlu
Yeah nice work! Now get on it with 3.50 ;)

Re: WebKit 3.30-3.36

Posted: Wed Apr 22, 2015 5:01 pm
by 9600pro
This is a very good news! Keep up the good work guys! ;)

Re: WebKit 3.30-3.36

Posted: Wed Apr 22, 2015 5:29 pm
by torrey187
I think 3.18 is still > 3.36 which is the fw im stuck on because renaming EBOOTS and putting it into the game folder is a pain in the ****

Re: WebKit 3.30-3.36

Posted: Wed Apr 22, 2015 5:54 pm
by R0ME0
Excellent! Thank you for the dedication to advancing the scene.