kr105-zz/ps4-dlclose

Fully implemented dlclose exploit for PS4 fw 1.76 with included linux loader

ps4-dlclose's Issues

Filesystem issues after exploit

Hi,

I have noticed these strange behaviours while accessing filesystem after the exploit:

1. Most of root folders are empty (adm, app_tmp, data, eap_user,eap_vsh, hdd, host, hostapp)

2. If I execute the stat call on all folders which are external to those inside the orginal sandbox directory (user, etc. ) the call always returns an error.

3. If I execute the statvfs call (I added it to the SDK) it gives me always the same (little) values, even on /mnt/disc which instead accesses the blu ray inside the ps4 when browser.

StatVFS: / bsize 4096 fblock 340 (1 MB) fragsize 4096 size 1276 (4 MB) fsid 0 mount flags 1 max length 255
StatVFS: /mnt/disc bsize 4096 fblock 340 (1 MB) fragsize 4096 size 1276 (4 MB) fsid 0 mount flags 1 max length 255

4. There is no /etc folder so it's impossible to enumerate all mounted filesystem

So my question is: are we really out of the jail ?

Does not compile

mprotect is undeclared as well as PROT_NONE undefined....but apart from this little slip the exploit works flawlessly! Great job!

-