PS5 Exploit Guide

HS2005 · Tuesday at 7:02 PM

Alright, so some tests with the latest Y2JB 1.6.
Link: https://github.com/Gezine/Y2JB/releases/tag/1.6

I did not to have make use of a back-up because I can already JB my console via Yarpe. So I did that first.

After that I downloaded the YT app > loaded it and replaced the download0.dat after that.
Be sure to enter 127.0.0.2 as your DNS. If not when you start your YT app it will try to update and you are soft locked.

After setting your network settings, start the YT app. See image below.

So obviously when you send p2jb.js via Netcat GUI > port 50000 you will get this message.
It's already jailbroken due to Yarpe. Next stop > reboot.

After a reboot, start the YT again. Mind the DNS settings: 127.0.0.2
Send p2jb.js again via Netcat GUI and use port 50000.

I'll have to wait 50 minutes. But if that works you won't have to use Yarpe (Arcade Spirits) anymore.
In my case not needed, because Yarpe is faster and gives better feedback.

For virgin consoles (so if you don't have a JB console already) you will have to use the back provided by Gezine if you are on 12.60 ~ 12.70. Link: https://github.com/Gezine/Y2JB/releases/download/1.6/Y2JB_backup_1.6.12.20.zip

But at least you don't need a disc drive and / or the Arcade Spirits game.

Another disclaimer:

Do not try this on firmwares 13.00 ~ 13.40. This is NOT a KEX, but a userland Exploit.
For FW 12.60 ~ 12.70 you can use the YT patch: 01.000.030
For FW 13.00 ~ 13.40 you can use the YT patch: 01.009.202. You can access the Remote JS loader via your local IP, so PS5 IP and port 50000 on those higher firmwares but that's about it.
Unless Gezine releases his private 13.20 exploit or somebody else has a KEX this is it (for now).

A few moments later....

So this is the end result. After the elfldr has spawned close the YT app.
Use Netcat GUI > port 9021 and I send pldmgr_v0.3.1.elf
We have no autoloader (yet) for this build. So I have to send payloads manually. But now I've got a back-up in case YT breaks or Yarpe.

"This is Ripley, last survivor of the PS5 JB era, signing off."

Draco_011 · Tuesday at 7:41 PM

Silenced4772 said:
Hi everyone. I was hoping to get some quick guidance. I have a 1.01 PS5 I’ve kept low to help people dump for keys and stuff. But I’d like to start actually using it for game backups and such.

Expectedly such a low firmware is basically unable to play anything. I can see there is a bunch of backports for 4.xx firmware. Is there a guide someone can point me to on how I could try and backport games to this firmware? I’ve read about APR EMU and BackPork but from what I gather this isn’t compatible on the firmware. I’m willing to do things myself just struggling to find resources that seem appropriate.

Thank you!

Welcome, in 3.x you can play few games if you want to wait a little bit longer...
With umtx you can load ETA hen and then shadowmount. Bestpig is also there but I didn't manage to make use of it.
The returnal, hitman & plague tale work with 3.x in external ssd.

BobaFett_UK · Tuesday at 7:45 PM

This one is for @MohammedQ8

DON'T UPDATE

HS2005 · Tuesday at 7:50 PM

BobaFett_UK said:
This one is for @MohammedQ8
DON'T UPDATE

View attachment 577269

I already saw many posts on the internet thinking that they can run 1.6 on 13.00 ~ 13.40, BUT also thinking it's a KEX.
Imagine the disappointment when they get a port 50000 screen and have no clue how to handle it

Anyway, I finished my little easy-peasy tutorial for the newest Y2JB.

yonasz · Tuesday at 7:53 PM

HS2005 said:
Alright, so some tests with the latest Y2JB 1.6.
Link: https://github.com/Gezine/Y2JB/releases/tag/1.6

I did not to have make use of a back-up because I can already JB my console via Yarpe. So I did that first.

After that I downloaded the YT app > loaded it and replaced the download0.dat after that.
Be sure to enter 127.0.0.2 as your DNS. If not when you start your YT app it will try to update and you are soft locked.

After setting your network settings, start the YT app. See image below.

View attachment 577252

So obviously when you send p2jb.js via Netcat GUI > port 50000 you will get this message.
It's already jailbroken due to Yarpe. Next stop > reboot.

View attachment 577253

After a reboot, start the YT again. Mind the DNS settings: 127.0.0.2
Send p2jb.js again via Netcat GUI and use port 50000.

View attachment 577254

I'll have to wait 50 minutes. But if that works you won't have to use Yarpe (Arcade Spirits) anymore.
In my case not needed, because Yarpe is faster and gives better feedback.

For virgin consoles (so if you don't have a JB console already) you will have to use the back provided by Gezine if you are on 12.60 ~ 12.70. Link: https://github.com/Gezine/Y2JB/releases/download/1.6/Y2JB_backup_1.6.12.20.zip

But at least you don't need a disc drive and / or the Arcade Spirits game.

Another disclaimer:

Do not try this on firmwares 13.00 ~ 13.40. This is NOT a KEX, but a userland Exploit.

For FW 12.60 ~ 12.70 you can use the YT patch: 01.000.030

For FW 13.00 ~ 13.40 you can use the YT patch: 01.009.202. You can access the Remote JS loader via your local IP, so PS5 IP and port 50000 on those higher firmwares but that's about it.

Unless Gezine releases his private 13.20 exploit or somebody else has a KEX this is it (for now).

A few moments later....

So this is the end result. After the elfldr has spawned close the YT app.
Use Netcat GUI > port 9021 and I send pldmgr_v0.3.1.elf
We have no autoloader (yet) for this build. So I have to send payloads manually. But now I've got a back-up in case YT breaks or Yarpe.

View attachment 577268

"This is Ripley, last survivor of the PS5 JB era, signing off."

So witch yt app I need 1.03? I'm on 12.70fw and I have swrr/yarpe/lua .
Btw swrr works every time compared to yarpe/lua.

HS2005 · Tuesday at 7:58 PM

yonasz said:
So witch yt app I need 1.03? I'm on 12.70fw and I have swrr/yarpe/lua .
Btw swrr works every time compared to yarpe/lua.

Well if you already have swrr/yarpe/lua, so same as I do and you want to use YT as well you will have to update the YT app. So you will have a disc based version JB and a digital JB.

This is what you need: https://prosperopatches.com/PPSA01650 > merge and create a PKG. The rest of the info is in my tut.

solitaire4eva · Tuesday at 7:59 PM

Need a disclaimer before posting anything that remotely look like an updated full jailbreak on current firmware. The uninformed will update thinking it's okay to find out they have to pack they system away and wait.

Update: Moe already update and currently playing Fortnite

HS2005 · Tuesday at 8:08 PM

BobaFett_UK said:
We should be seeing a itsPLK y2jb autoloader V0.8 out in the next day or two i guess now?

Next day? https://github.com/itsPLK/ps5-y2jb-autoloader/releases/tag/v0.8-dev-a1b152e
Developers don't sleep man.

I think that now the Gezine method works I will tinker with this release. Also due to an major elfdlr update: https://github.com/itsPLK/ps5-elfldr/releases/tag/v0.23.2-148b71c

Got some spare time so if it fails it fails. Like Drago says:

Post automatically merged: Tuesday at 8:28 PM

Alright so let's test out:

v0.8-dev-a1b152e

Pre-release

Changelog:

added P2JB support for firmwares above 10.01 up to 12.70 (lower firmwares use Lapse)
added estimated progress overlay during the P2JB exploit loading phase (shifts position randomly to prevent OLED burn-in)
updated elfldr (rebuilt with latest sdk)
updated Payload Manager to v0.3.1

Full Changelog (since last stable release): v0.7-530a4ce...v0.8-dev-a1b152e

So first boot when opening the YT app.

After that the first loading screen indicator. A huge improvement:

The loadbar gives the proper feedback:

yonasz · Tuesday at 8:34 PM

HS2005 said:
Well if you already have swrr/yarpe/lua, so same as I do and you want to use YT as well you will have to update the YT app. So you will have a disc based version JB and a digital JB.

This is what you need: https://prosperopatches.com/PPSA01650 > merge and create a PKG. The rest of the info is in my tut.

View attachment 577272

So I downloaded 1.003 version from modded warfare video link copy download0.dat but app not working/staring.

HS2005 · Tuesday at 8:37 PM

yonasz said:
So I downloaded 1.003 version from modded warfare video link copy download0.dat but app not working/staring.

Do you mean patch 01.000.030 or 01.000.003? As Gezine states in his readme:

For firmware 4.03 to 12.40 get YouTube app (PPSA01650) version 01.000.003 PKG
For firmware 12.60 and up get YouTube app (PPSA01650) version 01.000.030 PKG

Asuming you are on FW 12.60 or 12.70 or else this would be pointless for you as you have other options.

yonasz · Tuesday at 8:41 PM

HS2005 said:
Do you mean patch 01.000.030 or 01.000.003? As Gezine states in his readme:

For firmware 4.03 to 12.40 get YouTube app (PPSA01650) version 01.000.003 PKG

For firmware 12.60 and up get YouTube app (PPSA01650) version 01.000.030 PKG

Asuming you are on FW 12.60 or 12.70 or else this would be pointless for you as you have other options.

Now I noticed difference
Thanks
Anyone have link for full pkg?

HS2005 · Tuesday at 8:50 PM

yonasz said:
Now I noticed difference
Thanks
Anyone have link for full pkg?

Just get it via https://prosperopatches.com/PPSA01650 like I did.
Download the 2 files. rename the sc to a higher version and merge using pkg-merge-x64.exe > https://github.com/Tustin/pkg-merge/releases/tag/2.0.1
Think Modded Warfare made a tut about it.

Mahdi72 · Tuesday at 9:21 PM

Hi, i am on 12.70 and i saw that y2jb is ready, but i am confused about elf files and other stuffs. i dont know what should i do!
y2jb auto loader, gezine backup, elfld, shadowmountplus, kstuff, elf arsenal, voidshell,.... can someone explain a little? i am new.

HS2005 · Tuesday at 10:26 PM

1st attempt: failed > KP-ed.
2nd attempt: succes

Rasa39 · Tuesday at 11:39 PM

Does anyone know how to stop elf-arsenal from auto updating and replacing itself? It seems like no matter what, even if I don't manually tell it to update the payload, it still does it anyway.

Updates get pushed regularly, which is great, but often end up breaking something, especially if there's a big change. Right now it's got the voidshell ui lol.

HS2005 · 2026-06-10T00:31:26+0100

Post automatically merged: Yesterday at 12:31 AM

topcathack · 2026-06-10T00:49:35+0100

A couple of questions after these anouncements.

I am in 13.00 on a PRO, PSN activated, SWRR digital downloaded, PS Portal and Disc Drive Paired in April and never opened the box again. Should I stay there or wipe everything and going for one of the Youtube backups?

If I restore one of those backups, I understand I won't lose the drive pairing, it is the same with the portal?

Rasa39 · 2026-06-10T01:11:44+0100

Okay so now all ps5 games fail to launch suddenly.

I tried with elf-arsenal, etahen with shadowmount+ but it's still the same. PS4 works fine, but now every single ps5 game says "Can't start the app" whenever I click the game. I tried with webman but it does the same thing or sometimes crashes the console. I tried deleting the apps and re-mounting, tried using internal and USB, all results in the same thing.

I have one compressed game, the rest are loose folders, I used exfat and ffpkg before.

Wtf is going on?

bn2soldier · 2026-06-10T02:26:33+0100

Rasa39 said:
Okay so now all ps5 games fail to launch suddenly.

I tried with elf-arsenal, etahen with shadowmount+ but it's still the same. PS4 works fine, but now every single ps5 game says "Can't start the app" whenever I click the game. I tried with webman but it does the same thing or sometimes crashes the console. I tried deleting the apps and re-mounting, tried using internal and USB, all results in the same thing.

I have one compressed game, the rest are loose folders, I used exfat and ffpkg before.

Wtf is going on?

Stick with external, whats your autoloader saying also is it internal /data/autoloader or usb?
Only load...
pldmgr.elf (from USB)
then id suggest loading an ftp payload or etaHEN then checking your internal autoloader, pldmgr/payloads, and elf-arsenals config
if in doubt remove elf-arsenal completely (ftp) and restart ps5
autoload pldmgr (as above)
#1 - nanodns
#2 - backpork
#3 - shadowmountplus
#4 - +5 secs
#5 - etaHEN

or
autoload pldmgr
#1 - elf-arsenal

configure what you want in the settings eg (replace kstuff & smp in default locations) autoload backpork & nanodns

Finally your PS5 will more than likely crash and turn off 1/2/3 times before successfully jb and load your NEW config - It has a little temper tantrum but you should notice progression each time then should stabilize (speaking from my experience)

Remove your backup games ssd's and delete all the install game titles on your ps5 then replug ssd so when smp re-installs them they should work

worm28 · 2026-06-10T03:01:43+0100

Rasa39 said:
Okay so now all ps5 games fail to launch suddenly.

I tried with elf-arsenal, etahen with shadowmount+ but it's still the same. PS4 works fine, but now every single ps5 game says "Can't start the app" whenever I click the game. I tried with webman but it does the same thing or sometimes crashes the console. I tried deleting the apps and re-mounting, tried using internal and USB, all results in the same thing.

I have one compressed game, the rest are loose folders, I used exfat and ffpkg before.

Wtf is going on?

I have the same issue PS5 games stopped working out of no ware PS4 games and DLC still works all homebrew works this sucks. Are you using kstuff lite i am?

PS5 Hack Status:

Preparing Your Console:

Select Your Jailbreak:

Additional Information:

Warnings:

Archived Information

The destroyer of worlds

Member

Well-Known Member

The destroyer of worlds

Well-Known Member

The destroyer of worlds

Fickly Member

The destroyer of worlds

v0.8-dev-a1b152e​

Changelog:​

Well-Known Member

The destroyer of worlds

Well-Known Member

The destroyer of worlds

New Member

The destroyer of worlds

Pervert Deluxe

The destroyer of worlds

Member

Pervert Deluxe

Member

Well-Known Member

Similar threads

Popular threads in this forum

v0.8-dev-a1b152e

Changelog: