JsTypeHax/README.md

13 lines
715 B
Markdown
Raw Normal View History

2019-01-06 18:23:43 +01:00
# JsTypeHax
Wii U browser exploit for system version 5.5.2 and 5.5.3.
This PoC currently uses the homebrew launcher 1.4 payload, you can find the original file [here](https://github.com/dimok789/homebrew_launcher/releases/download/1.4/codebin.zip) .
To create a own usable payload, grab any `code550.bin` and `wiiuhaxx_loader.bin` from the [wiiuhaxx_common repo](https://github.com/wiiu-env/wiiuhaxx_common/releases) and place it in root of this repo.
Afterwards you can convert it to a JS arrays using `codebin2js.py`, replace line 53-56 on the `index.html` with this output.
2019-01-06 18:26:35 +01:00
# Dependencies
Python 3
2019-01-06 18:23:43 +01:00
# The bug
`CVE-2013-2857`, Use after free https://bugs.chromium.org/p/chromium/issues/detail?id=240124 .