Webbrowser

Web Content Guidelines

 * PS Vita Web Content Guidelines v3.00
 * PS3 Web Content Guidelines v3.10
 * PS4 Web Content Guidelines v1.50

Supports

 * Cookies
 * Javascript 1.7
 * partial HTML 5
 * Partial Video support (added from 2.10 update)

Not supported

 * Flash
 * Youtube (no HTML5: video)

Known Useragents
PlayStation Vita YouTube/1.0 libhttp/1.67 (PS Vita) PlayStation Vita YouTube/2.1 libhttp/2.60 (PS Vita) Useragent (Vita TV has trailing "Silk/3.2 VTE/2.50" or "Silk/3.2 VTE/3.30" as subidentifier):

Table below indicates known and unknown. "YES" = known vulnerability in use, "NO" = unknown if vulnerability in use.

Terminology
 An information security vulnerability is a mistake in software that can be directly used by a hacker to gain access to a system or network.

An information security exposure is a system configuration issue or a mistake in software that allows access to information or capabilities that can be used by a hacker as a stepping-stone into a system or network.

Common Vulnerabilities and Exposures list

 * http://www.lolhax.org/2014/10/28/psvita-webkit-for-2-00/

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1807

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4577


 * http://acez.re/ps-vita-level-1-webkitties-3/

http://packetstormsecurity.com/files/123089/Packet-Storm-Advisory-2013-0903-1-Apple-Safari-Heap-Buffer-Overflow.html (related to http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3748 / https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-3748)


 * https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1303 http://wololo.net/2015/04/22/new-webkit-exploit-found-vita-maybe-playstation-4/ (up to FW 3.36)

Repositories

 * https://github.com/Hykem/vitasploit/ by Hykem
 * repo
 * discarded repro reduction for <=1.81
 * https://github.com/xyzz/vitadump
 * https://bitbucket.org/Archaemic/memory-splicer
 * repo
 * https://github.com/acama/webkitties

Code, Test & Tool

 * live test live test (miror), live test (old)
 * memtools_vita https://github.com/BrianBTB/memtools_vita/
 * ROPTool
 * HTMLIt
 * http://pastie.org/private/ugchhaqctvmw5rrg5w37ka <- load more modules for the JSoS module dumper :)
 * SMOKE's Support_Uri Rop script

Webkit Modules

 * http://rghost.net/private/59665268/46690bd89ae7f298e4df145059c0d3e2 (3.18 dump)

Browsertests

 * http://www.roshi.tv/2011/12/psvitano.html

Access to the PS3 Store and get content in Vita
Video



PS Vita's browser has some secrets function, such as enter in ps store or open an app.

For example:

How it works

psns:browse

This command supports several arguments, the most usables are:

psns:browse?category= psns:browse?product=

By defining a category or product ID, this command will redirect you to the PSN Store and show you the chosen category/product. A few examples:

The syntax for categories works as follows:

PN + CONSOLE ID + REGION ID + PN + CONSOLE ID + STORE ID + REGION ID + PAGE

Common Console ID's are:

P3 --> PS3 VT --> PS VITA PC --> MEDIA GO / PSP

Common Store ID's are:

GAME or VIDEO

Redeem Comand

psns:redeem?code1=123&code2=456&code3=789

This command will immediantly prompt you to the PSN Stores' redeem function, taking the arguments with it.