PS5 Exploit Guide

HS2005 · 2026-08-05T09:33:27+0100

Blythe93 said:
Oh, so there's no need for PS Vue anymore? We can use webkit now?

Yes there is a webkit. But it can only be chained with a kernel exploit (KEX). Nonetheless it's great news and awesome developments.

If you can get this working you would be able to load Poops via the webkit instead of a BluRay disc. The same goes for P2JB that you can load via the webkit instead of Yarpe of Y2JB. But i'd wager that the browser will crash.. This is why I say it's promising.

Blythe93 · 2026-08-05T09:38:01+0100

HS2005 said:
Yes there is a webkit. But it can only be chained with a kernel exploit (KEX). Nonetheless it's great news and awesome developments.

What else do we need for a full exploit chain? From what I understand, webkit is the userland exploit and poops/Lapse is the kernel exploit? I might be missing something, though.

HS2005 · 2026-08-05T09:41:18+0100

TheStonedModder said:
Now we just need a kex that isnt 50+min!

That.. or just a new one for the 13.xx range

Post automatically merged: Today at 9:46 AM

Blythe93 said:
What else do we need for a full exploit chain? From what I understand, webkit is the userland exploit and poops/Lapse is the kernel exploit? I might be missing something, though.

Most common route:

USER INTERACTION (aka YOU)
USERLAND EXPLOIT (Webkit/Java etc.)
SANDBOX ESCAPE (IPC/system services/Privileges etc.)
KERNEL EXPLOIT
KERNEL PRIVILEGE ESCALATION

Done.

Well in layman's terms that is.
Developing a KEX is far more difficult and chaining it with a userland requires work.

Post automatically merged: Today at 10:23 AM

Inaki said:
Nothing against this PS5 Fan Target, but what's the difference or advantage over owendswang's ps5-fan-control ?

I would say compare the readme files within the blob of their Githubs and look for any changes:

owendswang: https://github.com/owendswang/ps5-fan-control/blob/main/README.md
drakmor: https://github.com/drakmor/fan_target/blob/main/README.md

Based on the data I generated a small comparison:

^^ This does not explain it in full detail. At least not from a developer/development perspective.
It all comes down to personal experiences and testing.

I'm using PHU to check for global temperatures. Although I have my PS5 placed horizontally and with enough space and air to breath it's temp. is mostly around 71~78°C.

Inaki · 2026-08-05T10:38:52+0100

HS2005 said:
That.. or just a new one for the 13.xx range

Post automatically merged: Today at 9:46 AM

Most common route:

USER INTERACTION (aka YOU)

USERLAND EXPLOIT (Webkit/Java etc.)

SANDBOX ESCAPE (IPC/system services/Privileges etc.)

KERNEL EXPLOIT

KERNEL PRIVILEGE ESCALATION

Done. Well in layman's terms that is.
Developing a KEX is far more difficult and chaining it with a userland requires work.

Post automatically merged: Today at 10:23 AM

I would say compare the readme files within the blob of their Githubs and look for any changes:

owendswang: https://github.com/owendswang/ps5-fan-control/blob/main/README.md
drakmor: https://github.com/drakmor/fan_target/blob/main/README.md

Based on the data I generated a small comparison:

View attachment 584861

^^ This does not explain it in full detail. At least not from a developer/development perspective.
It all comes down to personal experiences and testing.

I'm using PHU to check for global temperatures. Although I have my PS5 placed horizontally and with enough space and air to breath it's temp. is mostly around 71~78°C.

Thank you very much, good chart. I think I'll keep ps5-fan-control for now.

HS2005 · 2026-08-05T11:24:14+0100

New update from Drakmor

nanoDNS 0.4

Pre-release

IPv6 support
Quiet mode
Yandex.DNS fix (remove old nanodns.ini)

Link: https://github.com/drakmor/nanoDNS/releases/tag/0.4

Post automatically merged: Today at 11:31 AM

Use at your own pleasure:

Linkzzz:
https://cdn.discordapp.com/attachme...4b87c0d1a0fafe0c01db91cb816704b4c85ffbfafda4&
https://cdn.discordapp.com/attachme...4f2df62233fbd33855b6e14017e7dbefbacb019ee35f&

or: https://gofile.io/d/N6dVyd

mattyxarope · 2026-08-05T12:25:53+0100

HS2005 said:
View attachment 584858

To be honest, this is the first I've seen Dr.Yenyen post in a while that isn't him crashing out about people annoying him or talking about people in the scene. He get sooo wrapped up in Discord and Twitter drama, I don't know why he feeds into it.

Anyway, it's nice to see that we've got userland all the way up to 13.42.

Rasa39 · 2026-08-05T12:52:54+0100

ThePSGuy said:
Could this theoretically be used to launch legit purchased disc games that require FW 13.xx on 12.xx and lower?

Unfortunately not, I did give this a try. It didn't work with the older spoofer, but given this one changes the actual reported system firmware I figured it might at least get a black screen one those games (due to the encrypted eboot), but it still gives an error when booting.

KiiWii · 2026-08-05T13:51:35+0100

Slopkit test 9.xx-13.60

https://jordyidk.github.io/slopkit/

UnderJinx · 2026-08-05T14:33:38+0100

127.0.0.2 > this will block internet access and of course stop the YouTube app from updating. Use when running Y2JB

62.210.38.117 > this will give you internet access and block Sony update servers.

62.210.38.117 does this still work?
I need internet access to get etahen cheats up and running. Having some worries about adding cheats manually

HS2005 · 2026-08-05T14:40:56+0100

mattyxarope said:
To be honest, this is the first I've seen Dr.Yenyen post in a while that isn't him crashing out about people annoying him or talking about people in the scene. He get sooo wrapped up in Discord and Twitter drama, I don't know why he feeds into it.

Anyway, it's nice to see that we've got userland all the way up to 13.42.

People have a rough relationship with him and also the other way around.
Same goes for between him and me. He annoys me and I annoy him as well. This is our relationship and it works.
We do actually help each other from time to time, mainly to test future and experimental stuff. That's about it... It's fine. I like it the way it is.

Blythe93 · 2026-08-05T14:42:39+0100

HS2005 said:
People have a rough relationship with him and also the other way around.
Same goes for between him and me. He annoys me and I annoy him as well. This is our relationship and it works.
We do actually help each other from time to time, mainly to test future and experimental stuff. That's about it... It's fine. I like it the way it is.

On the other hand, he helped me a couple of times and he was very polite all this time. Very nice guy, I'd say.

Glad to see more and more things developed for the PS5 and PS4, things are moving really, really fast.

MohammedQ8 · 2026-08-05T14:43:50+0100

Can I upgrade to 12.00 now?

Marc_LFD · 2026-08-05T14:45:52+0100

Omg I can't believe there's now a 13.42 BD-JB AWESOME!!

I'll wait for a cheap BD-JB 13.42 to pop up on AliExpress.

TheStonedModder · 2026-08-05T14:48:39+0100

Marc_LFD said:
Omg I can't believe there's now a 13.42 BD-JB AWESOME!!

I'll wait for a cheap BD-JB 13.42 to pop up on AliExpress.

If anyone needs one. I can make them for $20 (shipping included)

With shipping nowadays that’s pretty much the cost of the disc ha

kam821 · 2026-08-05T14:49:15+0100

Marc_LFD said:
Omg I can't believe there's now a 13.42 BD-JB AWESOME!!

I'll wait for a cheap BD-JB 13.42 to pop up on AliExpress.

Just buy a Blu-Ray burner, I don't know what the prices are like now, but before the EU customs duties, you could buy a repacked LG BU40N for ~50-60 EUR on Aliexpress.

TheStonedModder · 2026-08-05T14:51:00+0100

kam821 said:
Just buy a blu-ray burner, I don't know what the prices are like now, but before the EU customs duties, you could buy a repacked LG BU40N for ~50-60 eur.

That’s about the price they are in USD as well

But than you are stuck with only buying spindles of blank discs which is about another $20ish on top since you can’t buy singles

That’s a big up front price, especially when you need to burn like 2 spindles of disks to get your money back. Most folks will only need 1-2 discs

MohammedQ8 · 2026-08-05T14:55:30+0100

I still have 5 blank blu ray discs

but I will wait for it to be more stable and tested

Do we have native ps2 for ps5 like the ps1 one?

Rasa39 · 2026-08-05T14:59:10+0100

UnderJinx said:
127.0.0.2 > this will block internet access and of course stop the YouTube app from updating. Use when running Y2JB

62.210.38.117 > this will give you internet access and block Sony update servers.

62.210.38.117 does this still work?
I need internet access to get etahen cheats up and running. Having some worries about adding cheats manually

Use 127.0.0.2 with nanoDNS. This is a local DNS payload and you won't have internet access at all until you use the nanoDNS.elf payload. Then you will have internet access, whilst blocking connections to Sony. I believe this is what the majority of people use.

enomao94 · 2026-08-05T15:05:35+0100

wait, this means i can patch my ps5 pro 13.20?

Marc_LFD · 2026-08-05T15:12:19+0100

enomao94 said:
wait, this means i can patch my ps5 pro 13.20?

The value of the PS5 Pro is about to get even higher now since it's hackable on newer firmwares. Good thing we already have one.

I'm gonna look into buying a Sony 4K OLED 48 TV.

PS5 Hack Status:

Preparing Your Console:

Select Your Jailbreak:

Additional Information:

Warnings:

Archived Information

The destroyer of worlds

The Treasure Tracker

The destroyer of worlds

Well-Known Member

The destroyer of worlds

nanoDNS 0.4​

Well-Known Member

Pervert Deluxe

Editorial Team

Well-Known Member

The destroyer of worlds

The Treasure Tracker

Well-Known Member

Well-Known Member

Developer

Member

Developer

Well-Known Member

Pervert Deluxe

Well-Known Member

Well-Known Member

Similar threads

Popular threads in this forum

nanoDNS 0.4