PS5 Exploit Guide

KiiWii · Mar 15, 2026

MASSIVE HV through JS:

worm28 · Mar 15, 2026

Theone5000 said:
So what's the issue you can't use this?

When booting and JB the PS5 put the garlic-savemgr.elf file in the

Code:

/data/ps5_autoloader/

folder. Latest version: https://github.com/earthonion/garlic-savemgr/actions/runs/23115420162

After it's loaded. Go to your IP and port number: 8082 in any browser. I use Chrome.
For example:

Code:

http://192.168.2.208:8082/

I'm loading etaHEN as well. Just FYI. My autoload.txt file:

Code:

#etaHEN-2.5B.bin etaHEN-2.6B.bin garlic-savemgr.elf garlic-worker-ps5.elf

Post automatically merged: Mar 15, 2026

There's a delete function now. You have to right click on a file. This is the most logical step, also from a dev perspective.

View attachment 562381

I tried this and it always gives this error.

Code:

5:03:45 PMFailed: Unterminated string in JSON at position 14018 (line 1 column 14019)
5:05:22 PMUploading PS4 sealed key SAVESERVICE-LINE-0-21Slot.bin...
5:05:22 PMUploading sdimg_SAVESERVICE-LINE-0-0 (16.0M) for resign...
5:05:24 PMError: Mount failed: -2147352544

Wolf85 · Mar 15, 2026

KiiWii said:
I might actually try stuff on 4.5x

Same here. That hv exploit comes out in updating from 2.50 to 4.03 or something

Rasa39 said:
I still think it's crazy how bd-jb can get re-enabled on higher firmwares to an extent. Yeah you need a jailbreak method to do so but still.

It reminds me of how the DS flashcarts could be re-enabled on 3DS, just by using a whitelist from older firmware consoles.

I wonder if any of that bd-jb info can be preserved for a backup method. Or perhaps that thing with the drive cloning/imaging?

Wait, what? I have one of those wood r4 flash carts for the Nintendo ds and dsl, are you telling me I can use that on a 3ds too? Any links to this information?

KiiWii said:
POC for 2.00 OFW only rn:

https://github.com/cragson/a53-code-exec

Proof of concept for code execution on the PS5's a53. Can be used to disable/defeat the Hypervisor till 5.00 (unimplemented).

Currently relies on DECI5S / sdbgp Protocol for read/write on a53 but can be done also from x86 (credits: flat_z).

DON'T BRICK YOUR CONSOLE BY WRITING TO SOMEWHERE YOU DON'T KNOW ABOUT!

SERIOUSLY?? I updated from 2.00 to 2.50 and now it comes back to bite me.

KiiWii · Mar 15, 2026

Wolf85 said:
Same here. That hv exploit comes out in updating from 2.50 to 4.03 or something

Wait, what? I have one of those wood r4 flash carts for the Nintendo ds and dsl, are you telling me I can use that on a 3ds too? Any links to this information?

SERIOUSLY?? I updated from 2.00 to 2.50 and now it comes back to bite me.

Don’t worry about the 2.00 thing, I think it will affect up to 5.00

MohammedQ8 · Mar 15, 2026

is JIT compiler exploit better than everything else? I have a feeling that I should restore my 12.70 system backup to hacked ps5 right now to activate the system now before they release new firmware lol

is the JIT compiler exploit something major or not? jit only works with starwars rr.

I am not playing on my hacked ps5 anyway lol so I can wait.

https://github.com/Gezine/Luac0re

Rasa39 · Mar 15, 2026

Wolf85 said:
Wait, what? I have one of those wood r4 flash carts for the Nintendo ds and dsl, are you telling me I can use that on a 3ds too? Any links to this information?

I think it's probably in the 3DS section somewhere. It was a while ago so I can't remember, but I'm sure it was here, cos I used to be pretty active on the 3DS and Switch.

I don't know if it works for all carts, but basically if the cart was blocked by that file on the 3DS, then patching it just removes those carts from that list, so the console allows them to boot after being detected rather than blocking them.

I was surprised myself, because when I tried my Acekard2i, it popped up as an Acekard2i like it did when first launched on the DSi (an ntrboot thing apparently). So it didn't detect it as a fake game, which i think the last update make it a horse game or whatever lol

iguanoPT · Mar 15, 2026

Rasa39 said:
Oh man, I can definitely hear mine. I have it flat too, original coloured plates so no speed holes for me. I thought they caused other components to get hotter though by changing the air pressure in the console, or are they decent?

I had the jet engine fan so even at default it was annoyingly loud. I swapped it out for an NMB fan (I'd had one on my previous ps5 and it was so much quieter).

I should mention my console is like 1ft away from me so...yeah. I might try a lower threshold but, I can't imagine I'm gonna like it lol

Mine has a Foxconn fan, it's not half bad. Yes Mc_Kuc already tested, and showed that fan holes help maintain lower temperatures.

zebrone · Mar 15, 2026

Theone5000 said:
So what's the issue you can't use this?

When booting and JB the PS5 put the garlic-savemgr.elf file in the

Code:

/data/ps5_autoloader/

folder. Latest version: https://github.com/earthonion/garlic-savemgr/actions/runs/23115420162

After it's loaded. Go to your IP and port number: 8082 in any browser. I use Chrome.
For example:

Code:

http://192.168.2.208:8082/

I'm loading etaHEN as well. Just FYI. My autoload.txt file:

Code:

#etaHEN-2.5B.bin etaHEN-2.6B.bin garlic-savemgr.elf garlic-worker-ps5.elf

Post automatically merged: Mar 15, 2026

There's a delete function now. You have to right click on a file. This is the most logical step, also from a dev perspective.

View attachment 562381

Why do you load TWO ETAHEN?

WHATS IS garlic-worker??

ThePSGuy · Mar 15, 2026

yonasz said:
Someone have to chain luac0re with kernel exploit and then you have to wait for kstuff support

I see, thanks for the reply. I guess kstuff support will come soon after a jailbreak is released but is the kernel exploit even public? I know it exist and last time I heard it was publicly available but I’m not 100% sure.

HS2005 · Mar 15, 2026

worm28 said:

I tried this and it always gives this error.

Code:

5:03:45 PMFailed: Unterminated string in JSON at position 14018 (line 1 column 14019)
5:05:22 PMUploading PS4 sealed key SAVESERVICE-LINE-0-21Slot.bin...
5:05:22 PMUploading sdimg_SAVESERVICE-LINE-0-0 (16.0M) for resign...
5:05:24 PMError: Mount failed: -2147352544

The JSON error failure was present in the previous versions.
Have you tried the latest build: https://github.com/earthonion/garlic-savemgr/actions/runs/23115420162
Check to see if this version works. Replace this version with your previous version and reboot your console.

Post automatically merged: Mar 15, 2026

zebrone said:
Why do you load TWO ETAHEN?

WHATS IS garlic-worker??

First question: No. # = does not load. It's a back-up. Everybody knows 2.6 will expire on the 17th. So you will have to revert to 2.5.

Second question: https://github.com/earthonion/garlic-worker < Use this to help the community. More workers = better.

Post automatically merged: Mar 15, 2026

Link: https://github.com/fail0verflow/prosperous

Wolf85 · Mar 15, 2026

Rasa39 said:
I think it's probably in the 3DS section somewhere. It was a while ago so I can't remember, but I'm sure it was here, cos I used to be pretty active on the 3DS and Switch.

I don't know if it works for all carts, but basically if the cart was blocked by that file on the 3DS, then patching it just removes those carts from that list, so the console allows them to boot after being detected rather than blocking them.

I was surprised myself, because when I tried my Acekard2i, it popped up as an Acekard2i like it did when first launched on the DSi (an ntrboot thing apparently). So it didn't detect it as a fake game, which i think the last update make it a horse game or whatever lol

That's interesting. I'll have to check that out.

Rasa39 · Mar 15, 2026

iguanoPT said:
Mine has a Foxconn fan, it's not half bad. Yes Mc_Kuc already tested, and showed that fan holes help maintain lower temperatures.

Yeah I think that's the fan I had originally, and I wish I hadn't gotten original colored plates if that's the case. Shame they're probably worth nothing now if I wanna sell them and try the holy art thou dbrando version.

I got excited when it said it was 70% off at dbrand...then saw that it's out of stock on disc edition fat :cry:

yonasz · Mar 16, 2026

ThePSGuy said:
I see, thanks for the reply. I guess kstuff support will come soon after a jailbreak is released but is the kernel exploit even public? I know it exist and last time I heard it was publicly available but I’m not 100% sure.

It's public

FateNightroad · Mar 16, 2026

rull_bull · Mar 16, 2026

Seems like shuffle released more files…
https://github.com/fail0verflow/prosperous

Guess that Dont Starve for PS4 is going to be the next game to rise in price

solitaire4eva · Mar 16, 2026

rull_bull said:
Seems like shuffle released more files…
https://github.com/fail0verflow/prosperous

Guess that Dont Starve for PS4 is going to be the next game to rise in price

Oh yea it's rare enough.... that game had a misprint if I remember correctly!

shano · Mar 16, 2026

Does the region matter for Dont Starve disc? I see save file on the github says CUSA00158 but will it end up supporting all CUSA versions?

KiiWii · Mar 16, 2026

Arcade spirits ps5 now working:

https://github.com/Helloyunho/yarpe/pull/12

rull_bull · Mar 16, 2026

Don’t know, I bought the Don’t Starve Mega Pack disc.
Couldn’t find anything else

peteruk · Mar 16, 2026

NP Real Sign In

https://github.com/earthonion/np-real-sign-in

Looks super useful

PS5 Hack Status:

Preparing Your Console:

Select Your Jailbreak:

Additional Information:

Warnings:

Archived Information

Editorial Team

Well-Known Member

Well-Known Member

Editorial Team

Well-Known Member

Pervert Deluxe

Well-Known Member

Well-Known Member

Well-Known Member

The destroyer of worlds

Well-Known Member

Pervert Deluxe

Well-Known Member

Well-Known Member

Well-Known Member

Fickly Member

Well-Known Member

Editorial Team

Well-Known Member

DMT hyperspace

Similar threads

Popular threads in this forum