Let's see if we can develop a jailbreak for 11.00 based on TheFloW disclosed exploit #857
Replies: 4 comments 5 replies
-
|
My test subject: |
Beta Was this translation helpful? Give feedback.
-
|
The offset of |
Beta Was this translation helpful? Give feedback.
-
|
Found the location to cause heap buffer overwrite with |
Beta Was this translation helpful? Give feedback.
-
|
No, what I need to do first should be build a PPPoE server that is able to craft this malicious header. |
Beta Was this translation helpful? Give feedback.
-
|
@ultimaweapon If you get it working, then I guess I'll upgrade to 11.00 :P |
Beta Was this translation helpful? Give feedback.
-
|
Pspspspsps. @ultimaweapon |
Beta Was this translation helpful? Give feedback.
-
|
Thanks! |
Beta Was this translation helpful? Give feedback.
-
|
Seems like this is very reliable. I just managed to success in a single run without any crashes. |
Beta Was this translation helpful? Give feedback.
-
|
To be fair, FloW is the one who discovered the exploit, told Sony so they could patch for later FW for legal reasons, then announced the exploit publicly just a week ago xD |
Beta Was this translation helpful? Give feedback.
-
Not sure if someone already started working on this. Here: https://twitter.com/theflow0/status/1783620012994945437
Beta Was this translation helpful? Give feedback.
All reactions