pastawithpesto/PS5-14.10-Jailbreak-Research

选用指南

AI 根据 README 整理 · 2026/10/19 08:41:07

使用方式

通过运行 Python 工具 host.py 并编辑 HTML 探针文件，在 PS5 浏览器上打开 URL 进行测试。

查看 README 依据

8. **FontFace API is fully reachable.** Font parser accepts numGlyphs=0xFFFF and unitsPerEm=0. CSSFontFace UAF found in source (testing on device). 9. **All 7 image formats supported.** PNG, JPEG, GIF, WebP, BMP, SVG, ICO. Truncated PNG IDAT loads without error. ## How to Use 1. Clone the repo 2. Run `python3 tools/host.py` 3. Edit `tools/fa-v62-huff.html` to pick a probe 4. Open the URL on the PS5 browser 5. Watch the beacon log ## Models Used This research was built with multiple LLMs working together. | Model | Role | |-------|------|

已知限制

作者指出 4.29GB 的写入超出映射虚拟内存，最大工作 spray 约 240MB，5000+ 缓冲区导致编译时 OOM，五种策略均失败。

查看 README 依据

5. **Sweep is too long to survive.** 4.29GB forward write exits mapped virtual memory. Maximum working spray is ~240MB (2400 buffers). 5000+ buffers causes OOM during compilation. Five different strategies tested (p150g through p150k), all fail. 6. **All Relapse WebKit bugs are patched on 14.10.** p160 tested the full set. 7. **Gigacage is disabled on PS5.** ArrayBuffer backing stores share heap with JSC internals. No address space isolation. Significant for any future primitive.