The-Homebrew-Cloud/JsTypeHax
2
0
Fork 0
mirror of https://github.com/wiiu-env/JsTypeHax.git synced 2024-06-28 10:46:05 +02:00
Code Issues Packages Projects Releases Wiki Activity
13 Commits 1 Branch 0 Tags 126 KiB
PHP 95.3%
Hack 4.7%
0a4d2e43ec
Go to file
orboditilt 0a4d2e43ec no message
2019-01-06 18:26:35 +01:00
codebin2js.py Fix the codebin2js.py script 2019-01-06 18:23:37 +01:00
index.html Add a full sample using the HBL 1.4 payload. 2019-01-06 18:23:31 +01:00
README.md no message 2019-01-06 18:26:35 +01:00
startServer.bat Update the startSever.bat to use python 3 2019-01-06 18:25:59 +01:00

README.md

JsTypeHax

Wii U browser exploit for system version 5.5.2 and 5.5.3.
This PoC currently uses the homebrew launcher 1.4 payload, you can find the original file here .
To create a own usable payload, grab any code550.bin and wiiuhaxx_loader.bin from the wiiuhaxx_common repo and place it in root of this repo. Afterwards you can convert it to a JS arrays using codebin2js.py, replace line 53-56 on the index.html with this output.

Dependencies

Python 3

The bug

CVE-2013-2857, Use after free https://bugs.chromium.org/p/chromium/issues/detail?id=240124 .