sleirsgoevy/bad_hoist

bad_hoist exploit that actually works. The original exploit was written by https://github.com/Fire30

bad_hoist's Issues

About memory errors

i have tried the new code to fix the webkit 9.00, but after it is loaded the webkit keep throwing memory errors just touching elements of the page. Same as with the first exploit code. To be more precisse, touching html tag elements. The events on them throw memory errors, and by the way it not possible to continue using a loaded page.

blank trophy timestamp in 9.00

my test::
Do not jailbreak and go and check trophy in retail state,,

result::
all my trophies that I got since 9.00 have blank trophy timestamp, but the trophies that I got since 5.05 don't have blank trophy timestamp

Why is this happening???

Webkit exploit opinion needed.

WebKit/WebKit@1f25966#diff-89b8bf5b63fc97e55626d2285f423011315ed98a6bad05b23b23f3f1bd6e5093

I tested the test included in the pull request and it completely crashed the ps4 browser. You think this is related to the current webkit? I'm no expert. 7.55 FW

ROP chain not working on FW 6.51

I've been testing the exploit and i managed to dump the libkernel libc and webkit binaries, but when i try for example the fib chain it only prints zeros.

get error ..

mkdir -p build/jb
8cc/8cc/python/rop-ps4-8cc /dev/stdout 8cc/librop/*.c 8cc/printf/*.c 8cc/ps4/*.c kex.c | python3 8cc/bad_hoist/rop/compiler.py /dev/stdin 8cc/bad_hoist/dumps/gadgets.txt > build/jb/c-code.js
Traceback (most recent call last):
  File "8cc/bad_hoist/rop/compiler.py", line 90, in <module>
    print(main(*sys.argv[1:]))
  File "8cc/bad_hoist/rop/compiler.py", line 87, in main
    return final_pass(asm, labels, gadgets)
  File "8cc/bad_hoist/rop/compiler.py", line 71, in final_pass
    raise SyntaxError(i)
SyntaxError: pop rax
make: *** [Makefile:11: build/jb/c-code.js] Error 1