CTurt

Luac0re 2.0 is released! JIT exploit has been added github.com/Gezine/Luac0re…

@W00fer @gezine_dev Nope! All credit to @gezine_dev

@CTurtE @gezine_dev Are you still assisting in these developments or just watching from the side?

… and just a couple of months later @gezine_dev managed to exploit the compiler process too! This completes the mast1c0re exploit chain for the first time, allowing for arbitrary native userland code execution on the latest PS4 / PS5 firmwares, without needing a kernel exploit

@carrot_c4k3 Cope

the annoying thing about living in a country with a high level of english is that locals will default to english with u 90% of the time so u have no opportunity to practice, but then ur unprepared for the other 10% of the time

i gotta learn german dawg

Very cool to see new progress with the mast1c0re exploit :)

Interesting FreeBSD advisory: freebsd.org/security/advis… It’s the first path traversal I’ve seen where the kernel itself is returning filenames with ../ (normally path traversal bugs are at the application-level). ‘Universal Path Traversal’ (akin to UXSS) could be a new bug class?

i'm excited to share Collateral Damage, a kernel exploit for SystemOS on Xbox One/Series consoles! this initial release is mostly intended for developers, but i hope people will enjoy playing around with it! writeup and more updates in the near future :) github.com/exploits-forsa…

This is big! New original Xbox exploit has been released, working on stock consoles with just a save. Can be triggered from the Dashboard and used as an entrypoint for unsigned code, no exploit games or swaps needed!! 🥳 github.com/XboxDev/endgam…

finally... hello, PS5 PSP :)

Part 2 - Attacking the compiler process: cturt.github.io/mast1c0re-2.ht… Ultimately I didn't finish the exploit, but hopefully it's still interesting, and maybe we will see a full exploit implementation from someone else in the future.

New blog post! Part 1 in my new PlayStation hacking series: An **unpatched** PS4 / PS5 userland exploit that also allows pirating PS2 games. mast1c0re: Hacking the PS4 / PS5 through the PS2 emulator - Part 1 - Escape: cturt.github.io/mast1c0re.html Video demo: youtube.com/watch?v=GIl1mR…

@notzecoxao @SamirSaramati What is even the point of hiding amounts on your hackerone profile if the program leaks the amounts paid out anyway lol

@Sharpthunderr I’m considering publishing it, but it’s only in a half finished state.

For a variety of reasons, it’s time for me to move on from the PlayStation hacking scene. I’m very thankful to have met some great people through this hobby over the years, and for the boost it’s given my security career. Some of the highlights for me were:

Working with the PlayStation team through the bug bounty program and successfully being awarded several $10k bounties.

mast1c0re: The first public PS4/5 userland exploit targeting a game instead of part of the operating system, making it the only one still unpatched on the latest firmware versions.

@CTurtE Please give a shotout to Brazil

This will be my last month at Google! (my decision was unrelated to layoffs) So thankful to have had the opportunity to work with such incredible colleagues, and contribute to such an impactful mission. Looking forward to starting my next adventure.