Code
Hub
Workspaces
Following
Trending
Connect
MCP
copy
Create free account
hub
/
github.com/ChendoChap/PS5-Webkit-Execution
/ functions
Functions
50 in github.com/ChendoChap/PS5-Webkit-Execution
⨍
Functions
50
◇
Types & classes
6
↓ 78 callers
Method
push
* performs `*rsp = value; rsp += 8;`
rop.js:66
↓ 18 callers
Function
ptrToString
(p)
webkit.js:50
↓ 12 callers
Function
mkString
(l, head)
webkit.js:70
↓ 12 callers
Function
set_offset_for_platform
(ps5_offset, ps4_offset)
exploit.js:13
↓ 7 callers
Method
push_write8
* performs `*dest = value;` in chain
rop.js:73
↓ 6 callers
Function
stringToPtr
(p, o)
webkit.js:59
↓ 5 callers
Method
get_rsp
* returns the current stack pointer.
rop.js:150
↓ 4 callers
Function
makeReader
(read_addr, ffs_name)
webkit.js:149
↓ 3 callers
Function
boot_addrof
(obj)
webkit.js:271
↓ 3 callers
Method
call
(rip, rdi, rsi, rdx, rcx, r8, r9)
rop.js:273
↓ 3 callers
Method
fcall
* helper function to add a standard sysv call to the chain.
rop.js:139
↓ 3 callers
Method
increment_stack
()
rop.js:44
↓ 2 callers
Function
i48_put
(x, a)
webkit.js:305
↓ 2 callers
Method
push_sysv
* pushes rdi-r9 args on the stack for sysv calls
rop.js:102
↓ 2 callers
Function
read_mem_setup
(p, sz)
webkit.js:324
↓ 2 callers
Method
run
()
rop.js:284
↓ 2 callers
Method
set_entry
(index, value)
rop.js:48
↓ 1 callers
Function
boot_fakeobj
(addr)
webkit.js:277
↓ 1 callers
Method
clear
()
rop.js:36
↓ 1 callers
Method
clear
()
rop.js:268
↓ 1 callers
Method
create_branch
* prepares a branch in the rop chain, for 32b comparisons on [addr] <-> compare value * use branch_types.XXXXX as type argument. * returns
rop.js:199
↓ 1 callers
Function
find_worker
()
exploit.js:448
↓ 1 callers
Method
get_branch
* returns the next available branch
rop.js:189
↓ 1 callers
Function
i48_get
(a)
webkit.js:310
↓ 1 callers
Method
increment_dword
* performs (*address)++; in chain
rop.js:253
↓ 1 callers
Method
jmp_to_rsp
* performs `rsp = dest;` in chain. * can be used to 'jump' to different parts of a rop chain
rop.js:158
↓ 1 callers
Function
run_hax
()
exploit.js:688
↓ 1 callers
Method
self_healing_syscall
* function intended to build a reusable 'syscall' chain. * Having a syscall return an error makes the stub perform a push rax, a call and a push
rop.js:167
↓ 1 callers
Method
set_branch_points
* finalizes a branch by setting the destination stack pointers. * swap met and not met args if trying for an inverted jmp type.
rop.js:245
↓ 1 callers
Method
set_initial_count
(count)
rop.js:29
↓ 1 callers
Method
spawn_thread
* returns created pthread_t as int64
rop.js:314
↓ 1 callers
Method
syscall
(sysc, rdi, rsi, rdx, rcx, r8, r9)
rop.js:280
↓ 1 callers
Function
userland
()
exploit.js:464
↓ 1 callers
Function
wait_for_worker
()
exploit.js:436
↓ 1 callers
Method
write_result
* performs `*dest = rax;` in chain
rop.js:84
↓ 1 callers
Method
write_result4
* performs `*dest = eax;` in chain
rop.js:93
↓ 1 callers
Function
zeroFill
(number, width)
int64.js:78
Function
array_from_address
(addr, size)
exploit.js:513
Method
constructor
(stack_size = 0x40000, reserved_stack = 0x10000)
rop.js:3
Method
constructor
(stack_size, reserved_stack)
rop.js:263
Method
constructor
(name = "rop_thread", stack_size, reserved_stack)
rop.js:291
Function
hex
(n)
webkit.js:12
Function
int64
(low, hi)
int64.js:1
Function
launch_chain
(chain)
exploit.js:578
Function
malloc
(sz, type = 4)
exploit.js:498
Function
poc
()
webkit.js:18
Function
pre_chain
(chain)
exploit.js:571
Function
readstr
(addr)
exploit.js:534
Function
stringify
(str)
exploit.js:525
Function
writestr
(addr, str)
exploit.js:547