throwaway96

News

New exploit for webOS 3.5+: DejaVuln (2024-04-21)

See dejavuln-autoroot for a simpler exploit that works on webOS 3.5+ TVs (i.e., models from 2017 and later). It is unpatched as of 2024-04-21 and does not require Developer Mode or even a network connection—just a USB drive.

Otherwise:

• If you have a webOS 5–8 TV with old enough firmware, WTA (which does not require Dev Mode) will still work.
• If you have a webOS 4.x TV, you can also try CVE-2023-6319, which is unpatched on the latest (final?) firmware for webOS 4.0 (2018) models.
• While there will eventually be fully software-based exploits released for older models, they can currently be rooted via NVM.

adnan360

#!/bin/bash

# Bash file to run React OS with QEMU
# ----
# This is an experimental command.
# Some things might not work. e.g. audio
# Install qemu, qemu-kvm or libvirt.
# Save this somewhere, download React OS boot ISO, prepare image:
# qemu-img create ReactOS.img 5G
# and run with `bash /path/to/run-reactos-qemu.sh`