ntfargo/Relapse-Exploit

选用指南

AI 根据 README 整理 · 2026/10/14 18:01:00

目标用户

面向安全研究人员，仅用于教育和安全研究目的。

查看 README 依据

## Credits - Sonic_Iso: Kernel Exploit - Jordy: Webkit Exploit and Kernel Bug - ntfargo: Exploit Dev - ufm42: Exploit Dev - Dr. Yenyen: Testing Other helps: - TheFlow, SlidyBat, Flatz, cow, nhk, bollarz, Sleirsgoevy, EchoStretch, EarthOnion. ## Disclaimer This project is intended for **educational and security research purposes only**. It does not endorse piracy, unauthorized access, or misuse of commercial devices. Use it only on devices you own or are authorized to test, and comply with applicable laws and regulations.

使用方式

通过浏览器访问利用页面，运行后默认载荷存储在payloads/目录，ELF加载器监听9021端口。

查看 README 依据

# PS5 Relapse Exploit Supported firmware: 7.00 through 13.60. ## Usage The default payloads are stored in `payloads/` after a successful run, the ELF loader listens on port `9021`. ## Stability notes Webkit may need several attempts, reload the page if the browser stalls. The kernel exploit may hang or panic the console, so reboot before trying again if that happens. ## Exploit chain Browser stage uses JSC info leaks and a structured clone object pool mismatch to corrupt a typedarray. The kernel stage combines a address leak with an `aio_multi_wait` uaf race to establish kernel r/w.

已知限制

Webkit可能需多次尝试，内核利用可能导致死机或崩溃，需重启后再试。

查看 README 依据

# PS5 Relapse Exploit Supported firmware: 7.00 through 13.60. ## Usage The default payloads are stored in `payloads/` after a successful run, the ELF loader listens on port `9021`. ## Stability notes Webkit may need several attempts, reload the page if the browser stalls. The kernel exploit may hang or panic the console, so reboot before trying again if that happens. ## Exploit chain Browser stage uses JSC info leaks and a structured clone object pool mismatch to corrupt a typedarray. The kernel stage combines a address leak with an `aio_multi_wait` uaf race to establish kernel r/w.