Recent content by BlackBearReloaded

  1. B

    Tutorial PS5 Exploit Guide

    What is your shadowmount plus version? Are you able to mount other ffpfsc apps or games? You need at least this ShadowMountPlus version or newer: https://github.com/drakmor/ShadowMountPlus/releases?page=2#release-1.6test15-fix1
  2. B

    Tutorial PS5 Exploit Guide

    Pretty much yes. It adds a new operation (7) that lets an app ask kstuff to elevate only its own process. I am not sure if this brings any other implications to kstuff - asked him directly in Discord but no answer yet.
  3. B

    Tutorial PS5 Exploit Guide

    Got a proof of concept working with a single kstuff-lite change: https://github.com/blackbearreloaded/kstuff-lite/pull/1 App proving the escalation...
  4. B

    Tutorial PS5 Exploit Guide

    Sharing another release on my multimedia (video, audio) research: ProsperoTV is a native IPTV client featuring 12,000+ channels by default, thanks to the community-maintained iptv-org catalog. 🌍 Video demo: Some features: 📡 More than 12,000 channels available by default ⚡ Native PS5...
  5. B

    Tutorial PS5 Exploit Guide

    It worked indeed! Sending the small payload to elfldr does the trick - app is now able to read/ write to anywhere in the filesystem (tested on /data). If anyone can test it (mine was tested on 6.02), I appreciate the feedback (it should write a txt file to /data)...
  6. B

    Tutorial PS5 Exploit Guide

    These are good ideas indeed, thanks. I am going to do some experimentation later today and report back.
  7. B

    Tutorial PS5 Exploit Guide

    Sharing my project here and all my research notes :) https://github.com/blackbearreloaded/ProsperoLight Video demo: Some features: 🎮 Native DualSense input 🖱️ Physical USB mouse and keyboard support ⌨️ Built-in on-screen keyboard for Windows login ⚡ PS5 hardware decoding through VideoDec2...
  8. B

    Tutorial PS5 Exploit Guide

    It does help indeed. I was just trying to get more details on all those libSceUserService, libScePad, libSceKeyboard, libSceMouse, scePadRead, scePadReadState. I wanted to see how to get the most optimized implementation to reduce as much latency as I could. I will give the credtis to your...
  9. B

    Tutorial PS5 Exploit Guide

    Glad it's helpful to someone else. There's more coming later today: - Native input research (controller, mouse, keyboard) - Native video decoding for H264, HEVC, VP9 and HDR for these 2 last ones I am just polishing my Moonlight client for PS5 and once released, will release all my research notes.
  10. B

    Tutorial PS5 Exploit Guide

    I spent a few days to get the libc.prx properly working . For many, many rounds, I was getting kernel panic on a sandboxed app on firmware 12.70. Had to wait 1h every time I had to test it plus the eventual KP just after finishing P2JB lol As a future follow-up: these native apps work like a...
  11. B

    Tutorial PS5 Exploit Guide

    Just sharing a native/ sandbox app I have been working on (also, to validate a template I made inspired on the work of SvenGDK and others): https://github.com/blackbearreloaded/ps5-radio The template app - the key challenge with it was to be able o build a libc.prx without including...
  12. B

    Tutorial PS5 Exploit Guide

    Hi all. I am currently working on a Moonlight client for PS5 (hardware-based h264 and HEVC decoding, HDR support too) and am looking for more people from different firmware versions or PC configuration that could test it. I have posted on the discord channel PS5 R&D sever, channel #testing as...
  13. B

    Tutorial PS5 Exploit Guide

    Hi all, just need some advice. I currently own 2 phat PS5: one on firmware v12.00 and one on firmware v6.02 (I bought this one recently in a good deal - I was not even looking for another one but the opportunity showed up). The 6.02 became my preferred one after Linux became a thing. In terms...
  14. B

    Tutorial PS5 Exploit Guide

    I see people sharing on Reddit a new kex they are calling Celsius - up to firmware 12.70. It seems related to the extended storage and there's a timing thing (needs to plug or unplug a USB drive on the right time?) but seems better than P2JB. Posted by DrYenYen as well:
  15. B

    Tutorial PS5 Exploit Guide

    Do you know how John was able to write that SDK? Pure reverse engineering? I find it fascinating how these guys can go this far on a closed system (I know it's based on some BSD variant but probably with a lot of private and closed content included by Sony).
See more