ntfargo

    ntfargo/CSSFontFace-Exploit

    WebKit CSSFontFace UAF exploit for PlayStation 4/5

    web
    JavaScript
    MIT
    326 stars
    88 forks
    326 GitHub watchers
    Updated Nov 5, 2026
    View on GitHub

    Build with Backblaze B2

    SDKs, agent skills, IDE extensions, and reference pipelines from Backblaze Labs. All open source.

    Explore Backblaze Labs

    Loading star history...

    Where it stands

    Rank, growth pace and release cadence relative to everything GStars tracks.

    The project lists 4 contributors on GitHub.

    Use Cases & Benefits

    • Provides a WebKit CSSFontFace use-after-free exploit targeting PlayStation 4 and PlayStation 5 firmware versions.
    • Enables exploitation of specific WebKit vulnerabilities on PS4/PS5 to achieve code execution where other methods may fail.
    • Use for security researchers developing proof-of-concept exploits on vulnerable PlayStation 4 firmware versions 6.00-11.02.
    • Use for penetration testers analyzing WebKit-based attack surfaces on PlayStation 5 firmware versions 1.00-8.60 with ASLR bypass.
    • Use for developers integrating custom payloads or homebrew enablers into the exploit chain for PS4 systems within supported firmware ranges.

    Should you depend on it?

    License terms, project hygiene and risks, from GitHub metadata and GStars' snapshots.

    License

    MIT

    Permissive: commercial use, modification and redistribution are allowed with attribution.

    Community files

    • README: present

    Watch-outs

    • No GitHub releases; pin a commit or tag instead of a release.

    General guidance from repository metadata, not legal advice. How we score

    From the README

    ufm42: Bug Research, Full Chain Exploit Development. Nathan Fargo aka @ntfargo: Bug Research, Writeup, Exploit Development. Dr.Yenyen: Testing. Hacking the PS4 by CTurt (2015) https://cturt.github.io/ps4.html Old PS5 Webkit contributors. (2022) https://github.com/ChendoChap/PS5-Webkit-Execution

    Excerpt from the ntfargo/CSSFontFace-Exploit README on GitHub (MIT license). © its authors.Read the full README on GitHub

    Daily snapshots

    Stars gained per day, and how forks and open issues moved, from GStars' daily snapshots

    Aug 14: +2Aug 15: +2Aug 16: +1Aug 17: +4Aug 18: +1Aug 19: +2Aug 20: +4

    +34 stars over 85 days across 13 snapshot days; best day +4 on Aug 17.

    Forks

    88+9

    Open issues

    9+2

    Compared with peers in Web

    Fastest-growing repositories GStars tracks in this cohort for the week of Nov 1, by 7-day star growth

    ntfargo/CSSFontFace-Exploit compared with Web repositories by stars, 7-day star growth, health score and last release
    RepositoryStars+7dHealthLast release
    pingdotgg/t3code48.4K+16.6K40today
    pbakaus/impeccable104.0K+8.7K5410 days ago
    HunYiSage/dsh-purge19.2K+6.2K13today
    Renhuai123/ziwei-doushu16.2K+6.1K4421 days ago
    paperclipai/paperclip111.5K+2.8K5913 days ago
    ntfargo/CSSFontFace-Exploit326—7—
    Category median48.4K+6.2K44—

    Discover Repositories

    Search across tracked repositories by name or description