From 6d0f559de9a448e9dc0d9c5e83994915ecdd3c93 Mon Sep 17 00:00:00 2001 From: orboditilt <45944072+orboditilt@users.noreply.github.com> Date: Sun, 6 Jan 2019 18:23:43 +0100 Subject: [PATCH] Add a readme --- README.md | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 README.md diff --git a/README.md b/README.md new file mode 100644 index 0000000..be22169 --- /dev/null +++ b/README.md @@ -0,0 +1,10 @@ +# JsTypeHax + +Wii U browser exploit for system version 5.5.2 and 5.5.3. +This PoC currently uses the homebrew launcher 1.4 payload, you can find the original file [here](https://github.com/dimok789/homebrew_launcher/releases/download/1.4/codebin.zip) . +To create a own usable payload, grab any `code550.bin` and `wiiuhaxx_loader.bin` from the [wiiuhaxx_common repo](https://github.com/wiiu-env/wiiuhaxx_common/releases) and place it in root of this repo. +Afterwards you can convert it to a JS arrays using `codebin2js.py`, replace line 53-56 on the `index.html` with this output. + +# The bug + +`CVE-2013-2857`, Use after free https://bugs.chromium.org/p/chromium/issues/detail?id=240124 . \ No newline at end of file