Console hacker, former Kaspersky Team Lead of Exploits & Network Threat Detection, security researcher. For tips (thx!): ko-fi.com/flatz
- Tweets 565
- Following 1,235
- Followers 12,745
- Likes 10,207
Aleksei Kulaev retweeted
Method we used (>5 years ago, now) on ps5 to fiddle with mp4 and hv memory: github.com/fail0verflow/pros…
hope it helps for linux!
18
106
677
146,708
Aleksei Kulaev retweeted
I ported Linux to the PS5 and turned it into a Steam Machine. Running GTA 5 Enhanced with Ray Tracing. 🤯
489
1,644
18,306
2,321,962
This is funny, just found an easter egg in Siglent oscilloscope that contains Super Mario game available through Web interface.
12
19
196
36,280
Aleksei Kulaev retweeted
Here's the link to the tool I meant to release at the end: github.com/symbrkrs/ps5-uart
It makes fiddling with EMC/EFC/EAP easy, have fun!
10
43
203
45,641
Aleksei Kulaev retweeted
Having a great time at #TheSAS2024 ! You find find slides for my talk here: symbrk.rs/presentations/Beyo… I didn't get through all slides...😅
3
36
151
48,251
Aleksei Kulaev retweeted
Living legend Shawn Hoffman @shuffle2, who extracted all keys from crypto processors of all video game consoles, talks at #TheSAS2024 about hacking PlayStation 5 chips
1
14
99
30,247
Aleksei Kulaev retweeted
Lars Fröder @opa334dev, creator of the Dopamine jailbreak, on stage to talk about iOS hacking in 2024 #TheSAS2024
2
26
285
71,008
There are a few ways on PS5 to defeat HV. One of methods that I've found was related to APIC: struct apic_ops is located in RW segment of kernel data. With KRW you can overwrite a function pointer inside it like xapic_mode and get into ROP, for example (just need to bypass CFI).
33
59
579
72,964
Then, after you do suspend/resume cycle your code will be executed before HV restarts and you can apply kernel patches, etc.
11
13
255
28,329
Aleksei Kulaev retweeted
Beyond Oberon: Exploiting PlayStation 5's EFC and EMC by Shawn Hoffman @shuffle2 #TheSAS2024 thesascon.com/ 👀
10
32
212
61,717
PS5's umtx exploit for Lua?gist.github.com/flatz/5e12f7…
9
43
315
85,289
Well, this is PS5's umtx exploit for BD-J (a part related to the exploit actually): gist.github.com/flatz/89dfe9…
21
77
468
84,708
Aleksei Kulaev retweeted
want to play with the fbsd umtx exploit? check out github.com/fail0verflow/ps5-…
20
119
604
102,615
Hello, folks. I'm in Serbia/UAE nowadays and looking for new job opportunities in info security. Remote jobs are currently preferred. CV: github.com/flatz/cv
17
50
222
68,419
Aleksei Kulaev retweeted
Decided to publish PPPwn early. The first PlayStation 4 Kernel RCE. Supporting FWs upto 11.00.
github.com/TheOfficialFloW/P…
330
904
4,590
634,598
On 4800s the Nuvoton chip marked 5565D-M was used as multi-controller. Unfortunately, there is no datasheet for it and its pinout very differs from all public datasheets of similar chips that I can find.
3
1
64
14,377
After a week of guessing, bruteforcing, reflashing BIOS (where I put my PSP payload) and observing LPC bus using Logic Analyzer, I was able to find a combination of register/bits that needed to be toggled to activate UART.
1
3
70
13,351