A modular collection of WebKit-based exploit chains for the PlayStation 4.
(Formerly known as PSFree Enhanced)
Features • Firmware Compatibility • Deployment • Screenshots • Contributing • Credits
- Auto-detection: Automatically detects console type and firmware version.
- WebKit Exploits: Entry point via the console's web browser using PSFree, Bad Hoist, CSSFontFace or slopkit.
- Kernel Exploits: Escalates privileges to kernel level using Lapse, Netctrl, or Sleirsgoevy's 6.7x.
- Payload Loader: After successful kernel exploitation, payloads or listens for incoming payloads on port
9020. - Barebone Jailbreak Experience option: Executes the exploit in a minimal DOM footprint and automatically redirects back to the main page upon completion.
- Firmware-Based Caching: Caches only what your specific firmware version requires instead of caching everything offline.
- Themes & Layouts: Customizable layout modes with independent theme options.
- HEN Flavor Selector: Toggle between HEN and GoldHEN, with integrated GoldHEN version selection.
- Descriptive Payload Selection: Clear descriptions and unsupported payload loading protection.
- Multilingual Support: Dynamic language switcher.
Offers expanded functionality when hosted locally on a PC or PS4 using PS4-Websrv:
- Network Scanner: Ability to scan the local network to find the PS4.
- Remote Payload Dispatch: Send the available or custom payloads from any smart device directly to the PS4.
This table indicates firmware versions for which the current version of this repository provides a functional and tested exploit chain.
| Userland | Kernel | Firmware |
|---|---|---|
| Bad Hoist | sleirsgoevy's kexploit | 6.70 - 6.72 |
| PSFree | Lapse | 7.00 - 9.60 |
| CSSFontFace | Lapse | 7.00 - 11.02 |
| CSSFontFace | Netctrl | 9.00 - 11.02 |
| Slopkit | Lapse | 11.00 - 12.02 |
| Slopkit | Netctrl | 12.50 - 13.00 |
| GoldHEN's PayLoader | - | 5.05 - latest |
Open the PS4 web browser and navigate directly http://webkitty.arabpixel.net/
- Clone the repository:
git clone https://github.com/ArabPixel/WebKitty.git
- Serve the directory using any standard Web server (e.g., Nginx, Apache, Python HTTP server, or PS4-Websrv).
- Open the browser on your PS4, that's it!
- Support lower firmwares by adding other exploits
📸 Click here to view Screenshots & Previews
Default Layout: Initial Screen |
Default Layout: Exploit Screen |
Compact Layout (Combined) |
Compact Layout (Vibrant) |
Settings |
About |
Customization |
About Catppuccino |
Catppuccino: Initial Screen |
Catppuccino: Exploit Screen |
You can contribute to WebKitty by:
- Creating pull requests for new translations in the
languagesfolder. - Modifying, updating, or implementing new host features.
- Reporting bugs or suggesting enhancements via issues.
- In case your PR has edits inside
index.js file, do not forget to generateindex-legacy.jsby typing
npm install # in case you didn't install them already.
npm run build
Important: If your PR includes a new file, don't forget to add it to the respective firmware-based manifest files!
AGPL-3.0-or-later (see LICENSE). Part of this repo belongs to the group anonymous. We refer to anonymous contributors as "anonymous" as well.
- anonymous: For PS4 firmware kernel dumps.
- Flatz: Duh
- TheFlow: For Netctrl kernel exploit.
- abc: For PSFree userland and Lapse kernel exploits.
- sleirsgoevy: For 6.7x kernel exploit.
- Fire30: For Bad Hoist userland exploit.
- Egycnq:: Porting Netctrl to slopkit.
- Jordy and Sonic-Iso: Original Slopkit project.
- Al-Azif: For the modular PSFree Lapse and AIO workaround implementations.
- Nathan Fargo and ufm42: For CSSFontFace userland exploit.
- ufm42: For CSSFontFace Netctrl and Lapse implementation.
- Feyzee61: For the PSFree lapse bundle and 6.7x exploit implementations.
- Dr.Yenyen: For intensive multi-firmware testing.
- Nazky: For being the first host I took a peek at.
- GattoDev: For the WebKitty logo.
- Payload developers: For their payloads.
Check the appropriate files for any extra contributors. Unless otherwise stated, everything here can also be credited to us.