CTurt
cturt.github.io · Personal blog · on HN since 2015
CTurt writes about console hacking and emulation, including PS4, PS2, Game Boy, and Nintendo 64 exploits.
What HN saysHN commenters recommend its PS4 hacking writeup for learning ROP, and link its Game Boy emulator and FreeDVDBoot posts.
30HN people shared it
13linked it in comments
18stories submitted
1.0Kstory points
2 years agolast shared
2015people per year2026
Most-shared posts
- 1Analysis of PS4's security and the state of hacking6 people · 210 points · first shared 2015 · 47 comments on HN
- 2Shogihax – Remote Code Execution on Nintendo 64 Through Morita Shogi 645 people · 6 points · first shared 2020 · discussion on HN
- 3Writing a Game Boy emulator4 people · 244 points · first shared 2018 · 48 comments on HN
- 4FreeDVDBoot – Hacking the Playstation 2 through its DVD player4 people · 170 points · first shared 2020 · 15 comments on HN
- 5Reverse Engineering and Modding Mario Pinball Land (GBA)3 people · 3 points · first shared 2020 · discussion on HN
- 6PS4 security article follow up2 people · 92 points · first shared 2015 · 27 comments on HN
- 7Hacking the PS4 / PS5 Through the PS2 Emulator – Part 22 people · 1 points · first shared 2022 · discussion on HN
- 8Hacking the PS4 / PS5 Through the PS2 Emulator1 people · 210 points · first shared 2022 · 89 comments on HN
- 9Hacking the PS4, part 3: Kernel exploitation1 people · 66 points · first shared 2015 · 5 comments on HN
- 10Analysis of CVE-2016-1887, sendmsg FreeBSD kernel heap overflow1 people · 2 points · first shared 2016 · discussion on HN
- 11Analysis of sys_dynlib_prepare_dlclose PS4 kernel heap overflow1 people · 1 points · first shared 2016 · discussion on HN
- 12Analysis of CVE-2016-1886, SETFKEY FreeBSD Kernel Vulnerability1 people · 1 points · first shared 2016 · discussion on HN
- 13Articles1 people · first shared 2015
What HN people wrote when they linked it
denkmoon · 2021-02-10
https://cturt.github.io/cinoop.html
Basic overview of a GameBoy emulator. Far cry from the complexities of a Switch, but still a great writeup by cturt.
loufe · 2019-10-27
If you're interested in learning more about ROP, I highly recommend this fantastic writeup CTURT produced about hacking the PS4 (which, of course, used ROP). https://cturt.github.io/ps4.html I
pipes · 2024-09-30
https://cturt.github.io/freedvdboot.html
I think this explains it.
I've been using free mcboot on a memory card with hard disc games for years. I never knew burnt dvds where possible without mod chip
ROFISH · 2024-09-30
https://cturt.github.io/freedvdboot.html
tldr; out of bounds payload on the dvd player
djsavvy · 2022-09-15
Anyone have a working link to part 2? The link at the bottom of the page [0] doesn't seem to work.
[0] https://cturt.github.io/mast1c0re-2.html
polm23 · 2020-06-22
This shogi game for the N64 included network hardware in the cartridge (see photo below) for online play. Unfortunately it also allowed arbitrary remote code execution.
https://twitter.com/sdhizumi/status/1274594780899500032?s=21
Exploit homepage:
https://cturt.github.io/shogihax.html
(Dear mods, the link above and its title might be better for this submission.)
matheusmoreira · 2020-04-11
> PS2 Emotion Engine
Ghidra is very useful for reverse engineering video games and all related technology! There are blogs showing how to do it:
https://cturt.github.io/pinball.html
sjwright · 2019-01-09
2trill2spill · 2016-06-01
Jails are used on the Playstation 4 and with some 36 Million PS4s sold so far that's a huge use of jails in production. Here's a quote from an article talking about it,
"We can prove the existence of FreeBSD jails being actively used in the PS4's kernel through the auditon system call being impossible to execute within a jailed environment"
This quote is from: https://cturt.github.io/ps4.html
PeCaN · 2016-04-04
PS3 did—I believe PS4 is not nearly as heavily modified[1]. It is certainly locked down though, at least after the early PS3s where you could, say, install Linux and build a HPC cluster[2].
1. Mostly from people who've hacked it; https://cturt.github.io/ps4.html seems to suggest it's a relatively stock FreeBSD kernel with some added system calls and a possibly heavily modified NetBSD userland.
2. http://phys.org/news/2010-12-air-playstation-3s-supercomputer.html
virtuallynathan · 2015-12-30
Some of this has been covered in other blogs: https://cturt.github.io/ps4.html
mninm · 2015-12-14
If this is true then it's a real bummer. Jailbreaking tends to pave the way for a lot of bad things. Rampant piracy and multiplayer cheating will totally bork the playstation ecosystem.
Edit:
I dug into this a little bit and it doesn't seem beyond the realm of possibility that this is credible. A little more info (though no smoking gun) can be found at the tweeters GitHub page http://cturt.github.io/articles.html
AlexAltea · 2015-09-06
These two articles are probably relevant and come from the same person:
1. http://cturt.github.io/ps4.html
2. http://cturt.github.io/ps4-2.html
They cover pretty much every question about the WebKit exploit and this open-source SDK.