# ZigZagBoi1/PS5-14.10-Research

> Open research into the PS5 firmware 14.10 kernel attack surface: 62 Lua probes via a userland loader on TCP 9026 map syscalls, memory, networking, and exploit paths.

- Magnitude: 4.3 out of 10 — Early signal
- Stars: 119 total · +21 stars measured 2026-10-18, 02:46–11:46 UTC, ≈ 46 by evening
- Star trust: star growth looks organic
- Category: Security · Language: Lua · Created: 2026-10-16 · Last push: 2026-10-18
- GitHub: https://github.com/ZigZagBoi1/PS5-14.10-Research · Homepage: https://marwanmohamed.ca/researchps5 · Page: https://gitnova.dev/en/r/ZigZagBoi1/PS5-14.10-Research

## Useful for

- Run Lua probes through the TCP 9026 loader to collect syscall data
- Study confirmed userland capabilities: heap R/W, module bases, syscall invocation
- Check the prepared 53a–53d retests to revisit inconclusive observations

## Why it’s here

- Star-counter measurements on 2026-10-18 (UTC), 02:46–11:46: 98 → 119 stars (+21). This is the change over that interval.
- Estimated end-of-day forecast: about +46 stars, using observed gains and the previous day.
- The repository is 2 days old and already has 119 stars. With less than two weeks of history, there's no usual pace to compare the spike against yet.
- Top new repositories this week: #165.

## Star trust

Star growth looks organic.

Star-trust labels are heuristics based on the repository’s behavior, not a check of every stargazer.

## Numbers

- Forks: 6
- Issues and pull requests: 3
- Watchers: 14
- Average over the last week: 50 per day
- Usual pace: too little history (under two weeks)
- Stars in the last hour (measured): 3

## Stars per day, last 3 days (oldest → newest, today is partial)

2026-10-16 … 2026-10-18: 46, 59, 21

## Spotted in now

- Top new repositories this week: #165

## More in this category

1. **valimised/ivxv** — 6.6 · Early signal · Security · Go · +69 stars measured 2026-10-18, 00:21–11:45 UTC, ≈ 141 by evening
   Source code of the Estonian IVXV online voting system, published for public review. It is used in elections and development is supervised by the State Electoral Office of Estonia.
   Full card: https://gitnova.dev/en/r/valimised/ivxv.md
2. **sakidekin/CVE-2026-41940-PoC** — 6.2 · Early signal · Security · Python · +94 stars measured 2026-10-18, 00:21–11:45 UTC, ≈ 186 by evening
   PoC exploit for CVE-2026-41940, an authentication bypass in cPanel & WHM (CVSS 10.0) that grants unauthenticated root-level WHM access via CRLF injection into server-side sessions. The tool scans targets and performs post-exploitation…
   Full card: https://gitnova.dev/en/r/sakidekin/CVE-2026-41940-PoC.md
3. **gichirimaku/wp2shell-PoC** — 6.0 · Early signal · Security · Python · +76 stars measured 2026-10-18, 00:21–11:45 UTC, ≈ 155 by evening
   Proof-of-concept exploit for the wp2shell vulnerability chain in WordPress Core (CVE-2026-63030 and CVE-2026-60137), leading from a pre-auth SQL injection to RCE. Intended for testing your own or authorized sites.
   Full card: https://gitnova.dev/en/r/gichirimaku/wp2shell-PoC.md
4. **PolygonOceanNote/SketchUp-Pro** — 5.4 · Early signal · Security · +72 stars measured 2026-10-18, 00:21–11:45 UTC, ≈ 172 by evening
   The repository poses as a pre-activated SketchUp Pro 2026 installer, but actually distributes a malicious PowerShell script via the irm | Invoke-Expression command. It is not an open-source project but an attempt to infect systems.
   Full card: https://gitnova.dev/en/r/PolygonOceanNote/SketchUp-Pro.md
5. **lineclericcode/Microsoft-365** — 5.4 · Early signal · Security · +70 stars measured 2026-10-18, 00:21–11:45 UTC, ≈ 170 by evening
   Repository offers a "pre-activated" Microsoft 365 build for Windows, distributed via a PowerShell script that disables security checks and executes third-party code.
   Full card: https://gitnova.dev/en/r/lineclericcode/Microsoft-365.md

---

Magnitude (0–10) measures how fast and how unusually interest in a repository is growing right now. It is not a quality score.
Days are UTC. “So far today” is a fact; “expected by the end of the day” is a forecast.
Summaries and use cases are written by an LLM (DeepSeek V4.1 Flash) from the README and may be inaccurate: verify specific claims (benchmarks, speed, hardware) in the repository itself.
Data as of 2026-10-18 11:55 UTC, updated every 30 minutes.