i finally got around to do some cleanup and...
here you are: https://www.sendspace.com/file/mdunzp
this package contains:
- ROP POC
- Module Dumpers
- helper script for creating rop chains
- other stuff
Advertising
Always interested to see how other people are doing theirs.nas wrote:...
I don't believe so, no. This was done in tandem, separately.anhell28 wrote:so i take it that this is a port of the vita webkit but for PS4.
Yeah, I noticed that when having a look through. Nice, by the way.Proxima wrote:The 64bit version is a bit different. It is the same heap corruption via the sort() bug, but from there its different. On 32bit you can set the Uint32Array to 0x40000000 size and access any memory. On 64bit, you have to carefully change the base address since the 0x40000000 trick doesn't work for a 64bit address space.