Devotd Github
NewSecurity

zigzagboi1/ps5-14.10-research — PS5 14.10 kernel attack surface research

A public research repository investigating userland paths on PS5 14.10; kernel read/write and a complete exploit have not yet been demonstrated.

Repositoryzigzagboi1/ps5-14.10-research ↗

A public research repository investigating userland paths on PS5 14.10; kernel read/write and a complete exploit have not yet been demonstrated.

GitHub description: Open PS5 firmware 14.10 research: Lua userland experiments, syscall and attack-surface analysis. Kernel read/write and a complete exploit are not demonstrated.

stars
★ 414
Forks
44
Language
Assembly
License
NOASSERTION
Read original source ↗View on GitHub ↗

zigzagboi1/ps5-14.10-research is a public research repository examining the kernel attack surface of PlayStation 5 firmware 14.10. This is not a new release; the repository's research contents have been made public. According to the README, it surveys system calls, memory and network paths, and the possibility of exploitation in userland, building on a Lua 5.1 loader. It also documents research using a modified save file from Hamidashi Creative and TCP 9026.

What sets this research apart is that it traces step by step the paths that could lead from the console's userland to the kernel. The published material includes CClosure redirection, read/write on the GPU mmap heap, and system call invocation. It probes the paths with 62 Lua probes, and the README distinguishes each stage as confirmed, incomplete, or not yet achieved. So it is closer to a research record for tracking the progress of attack paths than a finished exploit tool.

That said, the survey results written in the README are not enough to conclude that a kernel attack is feasible. KASLR defeat was not demonstrated along the paths investigated, and neither kernel read/write nor a complete exploit was shown. What this repository shows is an exploration of PS5 14.10 userland and a record of unfinished stages; the completion of a means to take over the kernel has not yet been confirmed.