KO | EN

GitLite

Minimalist Open Source Repository Search Engine

gitlite — search

#dsh #dsh-plugin #developer-tools #ai-agent #claude-code #codex #typescript #ai-agents #deepseek-harness #mcp #cli #rust

Luac0re

★ 313 Open GitHub ↗

Luac0re is a mast1c0re variation that uses Lua scripting for easier exploit development.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Luac0re

Luac0re is a [mast1c0re](https://cturt.github.io/mast1c0re.html) variation that uses Lua scripting for easier exploit development.

## Overview

- The original [mast1c0re for Okage](https://github.com/McCaulay/mast1c0re) uses PS2 code execution only, which requires the [PS2SDK](https://github.com/ps2dev/ps2sdk) to compile the code.  
- Luac0re uses minimal PS2 shellcode to escape ps2emu, then leverages the Lua 5.3 interpreter already embedded in the main executable (originally intended for ps2emu configuration) to simplify code writing and execution.
- Starting from version 2.0, a JIT compiler exploit has been added, enabling arbitrary native userland code execution on the latest PS4/PS5 firmwares without requiring a kernel exploit.  
- Additionally, non AF_UNIX domain socket creation restriction introduced in PS5 firmware 8.00 can now be bypassed using the JIT exploit.

## Requirements

- PS4 or PS5 console
- Disc or digital version of *Star Wars Racer Revenge* USA (CUSA03474) or EU (CUSA03492) region  
- Poopsploit payload requires 12.00 or lower firmware PS5

## Usage

1. Download the latest [release](https://github.com/Gezine/Luac0re/releases) ZIP file and extract it
2. The included savedata has been modified to allow a larger savedata image, as the original was too small to fit all the required files.  
3. As a result, existing savedata image cannot be used — resigning the included savedata is mandatory.  
4. For resigning the savedata, refer to the remote_lua_loader [SETUP guide](https://github.com/shahrilnet/remote_lua_loader/blob/main/SETUP.md)
5. Start the game and go to "OPTIONS -> HALL OF FAME"
6. Enjoy

## Credits

* **[CTurt](https://github.com/CTurt)** - [mast1c0re](https://cturt.github.io/mast1c0re.html) writeup
* **[McCaulay](https://github.com/McCaulay)** - [mast1c0re](https://mccaulay.co.uk/mast1c0re-part-2-arbitrary-ps2-code-execution/) writeup and [Okage](https://github.com/McCaulay/mast1c0re) reference implementation
* **[ChampionLeake](https://github.com/ChampionLeake)** - PS2 *Star Wars Racer Revenge* exploit writeup on [psdevwiki](https://www.psdevwiki.com/ps2/Vulnerabilities)
* **[shahrilnet](https://github.com/shahrilnet) & [null_ptr](https://github.com/n0llptr)** - Code references from [remote_lua_loader](https://github.com/shahrilnet/remote_lua_loader)
* **[Dr.Yenyen](https://github.com/DrYenyen)** - Testing and validation
* **[john-tornblom](https://github.com/john-tornblom)** — [elfldr](https://github.com/ps5-payload-dev/elfldr) and [ps5-payload-sdk](https://github.com/ps5-payload-dev/sdk/) used for compilation.  
* **[TheFlow](https://github.com/theofficialflow)** - Original netcontrol kernel exploit 
* **[egycnq](https://github.com/egycnq)** - Porting netcontrol kernel exploit to Luac0re
* **[cheburek3000](https://github.com/cheburek3000)** - Porting p2jb kernel exploit to Luac0re
* **[ufm42](https://github.com/ufm42)** - [kexp](https://github.com/ufm42/kexp) used for PS5 post JB all-in-one shellcode

## Disclaimer

This tool is provided as-is for research and development purposes only.  
Use at your own risk.  
The developers are not responsible for any damage, data loss, or other consequences resulting from the use of this software.

Luac0re

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README