PS5 Exploit Guide

SkiDDeR · Mar 12, 2026

BobaFett_UK said:
This is an example of the GOW structure in GSM
The save files are my own.. They work on one of my users.
I was merely trying to see if i could transfer the save file to another user on my console called User1 which has a diff account id

View attachment 561779

Do you have any save at chapter 3 or 4 (After Tyr Rescue)? I accidentally delete my save and i am searching everywhere to find a save file

HS2005 · Mar 12, 2026

BobaFett_UK said:
This is an example of the GOW structure in GSM
The save files are my own.. They work on one of my users.
I was merely trying to see if i could transfer the save file to another user on my console called User1 which has a diff account id

View attachment 561779

And what if you login with that other user, start the save manager, go to the resign page and enter the data below? Does that help? There's also a new import feature. Have not tested it yet.

BobaFett_UK · Mar 12, 2026

marios096 said:
Do you have any save at chapter 3 or 4 (After Tyr Rescue)? I accidentally delete my save and i am searching everywhere to find a save file

I have competed the NG+ game with full armour sets (including max level 10 for Zeus armour).

I’ve got some manual saves but tbh don’t know at what chapter those manual saves are at.

SkiDDeR · Mar 12, 2026

BobaFett_UK said:
I have competed the NG+ game with full armour sets (including max level 10 for Zeus armour).

I’ve got some manual saves but tbh don’t know at what chapter those manual saves are at.

i was around 4 hours in the game if you have a save near that time

solitaire4eva · Mar 12, 2026

Rasa39 said:
Dragons Dogma 2. I have the EUR version. I tried using all the backpork libraries too just to see if it would at least boot, but it seems whatever I'm doing, I must be doing something wrong.

oh backports look like they were only done for USA version. I saw two places for 4xxx and 5xxxx but all USA region. Eur one is version 3.0 and USA one starts at 1.0

BobaFett_UK · Mar 12, 2026

marios096 said:
i was around 4 hours in the game if you have a save near that time

I'll check and let you know

SkiDDeR · Mar 12, 2026

BobaFett_UK said:
I'll check and let you know

okay man thank you

Rasa39 · Mar 12, 2026

solitaire4eva said:
oh backports look like they were only done for USA version. I saw two places for 4xxx and 5xxxx but all USA region. Eur one is version 3.0 and USA one starts at 1.0

Ah damn, and I can't get oy own backport to work. This probably sounds dumb, but is there any way to convert those other backports to work with the EUR version?

Cos I'm assuming that a 5.xx should work on 6.xx right? Since it's a lower firmware so the game should launch from that backport if I can get it converted to EUR right?

Wolf85 · Mar 12, 2026

Rasa39 said:
Ah damn, and I can't get oy own backport to work. This probably sounds dumb, but is there any way to convert those other backports to work with the EUR version?

Cos I'm assuming that a 5.xx should work on 6.xx right? Since it's a lower firmware so the game should launch from that backport if I can get it converted to EUR right?

Not necessarily. The fake libs are being stripped of dependencies required for higher firmwares, if you get one patched for a lower firmware, it removes functionality from the higher ones. The problem is, we don't have access to the original libraries that the games require to be patching in the first place. Unless someone is hosting them somewhere, the only way to get them is to dump them from that firmware. They have to be dumped from a jailbroken ps5 with the firmware needed, or at least close to it. 10.00 can dump all 10.xx firmwares but not 11.xx

Rasa39 · Mar 12, 2026

Wolf85 said:
Unless someone is hosting them somewhere, the only way to get them is to dump them from that firmware. They have to be dumped from a jailbroken ps5 with the firmware needed, or at least close to it. 10.00 can dump all 10.xx firmwares but not 11.xx

Right so I have my own patched libs for my firmware, so I should be able to make it work. But even though that worked on other games, it just isn't working on this one. I would try the 5.xx backport mentioned earlier, and use my own 6.xx libs instead, but the problem is the online backpork is apparently only for USA version and I have EUR version.

So I guess I'll just have to wait for now and hope someone makes a 6.xx backport for the EUR version. Someone who knows this better than myself, since other people seem to be able to make backporks with no issues getting in game.

BobaFett_UK · Mar 12, 2026

Theone5000 said:
And what if you login with that other user, start the save manager, go to the resign page and enter the data below? Does that help? There's also a new import feature. Have not tested it yet.
View attachment 561784

I have tried a few permutations.... it simply will not resign the game..

Wolf85 · Mar 12, 2026

Rasa39 said:
Right so I have my own patched libs for my firmware, so I should be able to make it work. But even though that worked on other games, it just isn't working on this one. I would try the 5.xx backport mentioned earlier, and use my own 6.xx libs instead, but the problem is the online backpork is apparently only for USA version and I have EUR version.

So I guess I'll just have to wait for now and hope someone makes a 6.xx backport for the EUR version. Someone who knows this better than myself, since other people seem to be able to make backporks with no issues getting in game.

Some games require patching other libraries too and those particular ones haven't been provided in patched format. That's why we would need access to the original decrypted 10.01 library files. My firmware can't even use backports yet. Best pig said something about the app crashing before the files can even be loaded.

Post automatically merged: Mar 12, 2026

BobaFett_UK said:
I have tried a few permutations.... it simply will not resign the game..

Did you leave out the = sign when entering the account id?
Nvm, that was for the remote play thing.

KiiWii · Mar 12, 2026

https://github.com/buzzer-re/PS5_kldload

PS5 kldload

This is a kernel module loader for the PlayStation 5 that aims to provide a deeper understanding of the system's internals and assist in my research into its internals.

The hypervisor remains active and untouched, but the kernel modules run normally and in harmony with it.

How It Works

On PlayStation 4 systems, developers were able to patch the running kernel to force it to always allocate read-write-executable memory areas in the kmem_alloc function. On the PlayStation 5, things are a bit different, with a few caveats, such as the Hypervisor, that prevent .text read/write access due to XOM and the assumption that GMET is enabled.

GMET (Guest Mode Execute) is an AMD technology used by its hypervisor to specifically control which pages can execute at the guest level. When it is enabled and properly configured, the guest cannot request executable pages or execute code outside the allowed area.

The PlayStation 5 lacks this configuration until firmware 6.50. kldload works by requesting such pages, writing code into them using the kernel read/write primitives, and executing it as a real kthread, thus allowing real kernel-level code execution on the device.

Supported Firmware

Currently supported firmware:

3.0
3.10
3.20
3.21
4.03
4.51
5.0
5.02
5.10
5.50
6.0 (Unstable)
6.02 (Unstable)
6.50 (Unstable)

BobaFett_UK · Mar 12, 2026

Wolf85 said:
Some games require patching other libraries too and those particular ones haven't been provided in patched format. That's why we would need access to the original decrypted 10.01 library files. My firmware can't even use backports yet. Best pig said something about the app crashing before the files can even be loaded.

Post automatically merged: Mar 12, 2026

Did you leave out the = sign when entering the account id?
Nvm, that was for the remote play thing.

You can only enter the alpha/numerics in the field. It’s got a fixed length I believe

Wolf85 · Mar 12, 2026

BobaFett_UK said:
You can only enter the alpha/numerics in the field. It’s got a fixed length I believe

Yeah. I remembered that after I first posted. I'm guessing that's my brains way of reminding me I still have to re-setup my jailbroken ps5 for remote play after recovery.

HS2005 · Mar 12, 2026

Garlic Save Manager

v1.5 Release Notes

Full PS4 Backward Compatibility

Mount, decrypt, encrypt, and resign PS4 saves alongside PS5
PS4 sealed key (.bin) decryption via /dev/pfsmgr
PS4 encrypt creates PFS image with PPR format
PS4 resign with AID patching at offset 0x15C
PS4 encrypted download bundles save image + .bin key as zip
PS4/PS5 detection by image header byte (0x01=PS4, 0x02=PS5) instead of filename

New Features

Import Save tab — import decrypted save folders directly to PS5
Bulk export — 3-dot menu on title groups to export all saves (encrypted or decrypted)
SFO parser extracts metadata (TITLE_ID, SAVEDATA_DIRECTORY, etc.)
Upload to folder via folder context menu

UI Improvements

Blue PS4 / Green PS5 / Yellow BACKUP badges in save list
Mobile responsive layout with hamburger menu and collapsible save drawer
Options dropdown for save actions on mobile
Folders start collapsed by default
_dec and _enc suffixes on download filenames
Sponsor button on shutdown screen

Bug Fixes

Fixed JSON truncation causing "unterminated string" errors (Issue #2) — buffer size calculation was missing the type field added for PS4 support
Fixed JSON escaping for game titles containing quotes or backslashes
Fixed PS4 zip data descriptor per spec
CI build artifact workflow added

Link: https://github.com/earthonion/garlic-savemgr/releases/tag/v1.5

solitaire4eva · Mar 12, 2026

Rasa39 said:
Ah damn, and I can't get oy own backport to work. This probably sounds dumb, but is there any way to convert those other backports to work with the EUR version?

Cos I'm assuming that a 5.xx should work on 6.xx right? Since it's a lower firmware so the game should launch from that backport if I can get it converted to EUR right?

I would just download the USA version and don't think about the time you already spent playing and I know it sucks. I have had to do it many times with USA versions of games that had eUr ones with better versions and dlc.

BobaFett_UK · Mar 12, 2026

Theone5000 said:
Garlic Save Manager
v1.5 Release Notes
Full PS4 Backward Compatibility

Mount, decrypt, encrypt, and resign PS4 saves alongside PS5

PS4 sealed key (.bin) decryption via /dev/pfsmgr

PS4 encrypt creates PFS image with PPR format

PS4 resign with AID patching at offset 0x15C

PS4 encrypted download bundles save image + .bin key as zip

PS4/PS5 detection by image header byte (0x01=PS4, 0x02=PS5) instead of filename

New Features

Import Save tab — import decrypted save folders directly to PS5

Bulk export — 3-dot menu on title groups to export all saves (encrypted or decrypted)

SFO parser extracts metadata (TITLE_ID, SAVEDATA_DIRECTORY, etc.)

Upload to folder via folder context menu

UI Improvements

Blue PS4 / Green PS5 / Yellow BACKUP badges in save list

Mobile responsive layout with hamburger menu and collapsible save drawer

Options dropdown for save actions on mobile

Folders start collapsed by default

_dec and _enc suffixes on download filenames

Sponsor button on shutdown screen

Bug Fixes

Fixed JSON truncation causing "unterminated string" errors (Issue #2) — buffer size calculation was missing the type field added for PS4 support

Fixed JSON escaping for game titles containing quotes or backslashes

Fixed PS4 zip data descriptor per spec

CI build artifact workflow added

Link: https://github.com/earthonion/garlic-savemgr/releases/tag/v1.5

Am i on the credits with helping out with all the negative testing?

bass12 · Mar 13, 2026

I tried the Garlic SaveMgr with Onimusha 2, but it doesn't work. After swapping the data, it's displayed as corrupted in the game, and the following error appears: CSE-06C00-TCR-TAD2

HS2005 · Mar 13, 2026

bass12 said:
I tried the Garlic SaveMgr with Onimusha 2, but it doesn't work. After swapping the data, it's displayed as corrupted in the game, and the following error appears: CSE-06C00-TCR-TAD2

Is it a game for the PS4 or PS5? I could only find CUSA49799 (US) as an TitleID.

The best way I find is to first decrypt the downloaded save and replace those file by drag and drop it. Look for my MGS3 example. Every game has it's unique save structure.

Post automatically merged: Mar 13, 2026

BobaFett_UK said:
Am i on the credits with helping out with all the negative testing?

Haha nope. Same goes for me

But we will continue to improve nonetheless

PS5 Hack Status:

Preparing Your Console:

Select Your Jailbreak:

Additional Information:

Warnings:

Archived Information

Well-Known Member

The destroyer of worlds

Well-Known Member

Well-Known Member

Fickly Member

Well-Known Member

Well-Known Member

Pervert Deluxe

Well-Known Member

Pervert Deluxe

Well-Known Member

Well-Known Member

Editorial Team

PS5 kldload​

How It Works​

Supported Firmware​

Well-Known Member

Well-Known Member

The destroyer of worlds

Garlic Save Manager​

v1.5 Release Notes​

Full PS4 Backward Compatibility​

New Features​

UI Improvements​

Bug Fixes​

Fickly Member

Well-Known Member

Garlic Save Manager​

v1.5 Release Notes​

Full PS4 Backward Compatibility​

New Features​

UI Improvements​

Bug Fixes​

Member

The destroyer of worlds

Similar threads

Popular threads in this forum

PS5 kldload

How It Works

Supported Firmware

Garlic Save Manager

v1.5 Release Notes

Full PS4 Backward Compatibility

New Features

UI Improvements

Bug Fixes

Garlic Save Manager

v1.5 Release Notes

Full PS4 Backward Compatibility

New Features

UI Improvements

Bug Fixes