fail0verflow @fail0verflow

fail0verflow.com Joined November 2010

Tweets

227
Followers

52K
Following

10
Likes

6

fail0verflow @fail0verflow

12 months ago

want to play with the fbsd umtx exploit? check out github.com/fail0verflow/p…

20 128 620 96K 67

Aleksei Kulaev @flat_z

2 years ago

131 245 2K 347K 98

Download Image

9 45 269 45K 8

fail0verflow @fail0verflow

3 years ago

New blog post about hacking PS VR! We managed to find some major flaws - breaking secure boot and extracting all key material: fail0verflow.com/blog/2022/ps4-…

14 185 590 0 28

fail0verflow @fail0verflow

4 years ago

Translation: We got all (symmetric) ps5 root keys. They can all be obtained from software - including per-console root key, if you look hard enough!

fail0verflow @fail0verflow

4 years ago

Translation: We got all (symmetric) ps5 root keys. They can all be obtained from software - including per-console root key, if you look hard enough!

73 358 2K 0 65

Download Image

138 1K 4K 0 151

fail0verflow @fail0verflow

4 years ago

Another one bites the dust 😎

73 358 2K 0 65

Download Image

fail0verflow @fail0verflow

6 years ago

Here is our implementation of the Renesas RL78 debug protocol (as requested in a comment on the blog): github.com/fail0verflow/r…

8 33 185 0 5

fail0verflow @fail0verflow

7 years ago

Took a peek at latest PS4 Pro (CUH-72xx, board NVG-001): same southbridge (CXD90046GG), newly marked syscon (A06-C0L2 but still RL78/G13) - so nothing changes in terms of "Aux Hax" stuff :)

31 54 299 0 1

Another "PS4 Aux Hax" blog! Using HDMI-CEC to get code exec on all PS4 southbridge versions (including PS4 Pro, etc.), without requiring other parts of the system to be pwned: fail0verflow.com/blog/2018/ps4-…

35 391 975 0 26

fail0verflow @fail0verflow

7 years ago

Small update to Aux Hax: Nearly same methods are working against devices on recent PS4 Pro board NVB-003: Syscon A05-C0L2 (R5F101LL) Belize southbridge (CXD90046GG) Belize has ROM readout protection and clears stack...they're learning ;)

11 48 253 0 1

fail0verflow @fail0verflow

7 years ago

A trio of new blog posts! Checkout "PS4 Aux Hax": hacking Aeolia, Syscon, and DS4. fail0verflow.com/blog/2018/ps4-…

14 162 443 0 9

fail0verflow @fail0verflow

7 years ago

Fun fact: we started upstreaming some patches months ago (working with the linux-tegra community on Tegra X1 support in mainline Linux), so if you've seen anyone else running Linux on the Switch recently... chances are they were running some of our code unknowingly ;-)

13 31 272 0 0

fail0verflow @fail0verflow

7 years ago

Reminder: ShofEL2 cannot be patched in existing units (it will work on *any* firmware, past or future), it allows full access (all keys and secrets), and it is completely undetectable by normal software. You can dual boot Linux and Switch OS with impunity.

fail0verflow @fail0verflow

8 years ago

57 573 2K 0 6

28 162 484 0 3

fail0verflow @fail0verflow

7 years ago

ShofEL2, a Tegra X1 and Nintendo Switch exploit fail0verflow.com/blog/2018/shof… github.com/fail0verflow/s…

22 349 760 0 7

fail0verflow @fail0verflow

7 years ago

ShofEL2 also supports running Switch homebrew. Technically.

24 133 604 0 2

Download Image

fail0verflow @fail0verflow

7 years ago

Jokes aside, we have a 90-day responsible disclosure window for ShofEL2 ending on April 25th. Since another person published the bug so close to our declared deadline, we're going to wait things out. Stay tuned.