PS5 Exploit Guide

Arakon · May 18, 2026

lufeig said:
@Arakon mentioned that there was a way to have the backport files on a separate folder without having to overwrite any of the game files. I just want to know the folder structure for that.

The point is that this doesn't seem to work at this time. According to the shadowmountplus readme, this is meant to be a folder "backports" in the same path as the games, with a subfolder with the same folder name as the game.
However, it doesn't work right now, see i.e. https://github.com/drakmor/ShadowMountPlus/issues/16

MohammedQ8 · May 18, 2026

Why shadow mount is not working? And failed to start games pauses kstaff that I have to go to the settings to unpause it

Post automatically merged: May 18, 2026

It used to automatically detect games .. now nothing happens

Post automatically merged: May 18, 2026

.

HS2005 · May 18, 2026

MohammedQ8 said:
Why shadow mount is not working? And failed to start games pauses kstaff that I have to go to the settings to unpause it

Post automatically merged: May 18, 2026

It used to automatically detect games .. now nothing happens

Post automatically merged: May 18, 2026

.

Upload the latest .elf file in the .zip file: https://github.com/drakmor/ShadowMountPlus/releases/tag/1.6test11
to /data/etaHEN/payloads/ and use etaHEN to activate the payload. See what error(s) it gives.

flopsy · May 18, 2026

lufeig said:
It would be nice to download it, make my own exfat - which is actually exactly the dump folder, but in an image container - and then when the backpork is released, I just save it in a separate folder.

Or if a game dump is updated with a newer update version, maybe I don't need to download and apply the backpork again, since it will be unaffected, in another folder.

I would also like this. Exfat images with backport on the side. Also nice for using on different systems with different fw.

How is global folder supposed to work? Arent the backpork files different for each game? Atleast eboot.bin has to be.

solitaire4eva · May 18, 2026

KiiWii said:
From what I’ve been told, 100%.

I got two of them and I was a few minutes from updating to 4.03 with one lol. Thanks. I can hold back.

I will never use P2JB cause 2 hours and a chance of failure would make me crashout and break the PS5

wxanges · May 18, 2026

Adam512 said:
do not update the console and do not connect it to internet.

now you can use the backup profile from the internet for lua to get the lua userland up and running. You can also wait for webkit or use netflix/y2jb.

FW 12.00 has more kernel exploits so definitely do not update

I downloaded a backup where I saw there are 24 lua saves, but don't I have to re-sign them for my console?

solitaire4eva · May 18, 2026

MohammedQ8 said:
what is the best Linux distribution to use for regular users and gaming?

Support wise ubuntu. Most popular

lufeig · May 18, 2026

Theone5000 said:
Most games have a exfat release, unless you are looking for a specific release.
You can always use the newest version that applies the backport: https://github.com/kerrdec97/ps5-exfat-builder/releases/tag/v3.0.0

yep. but usually they're released in dump folder format first, and that's what I usually download. and convert them using the simple, oldschool .bat script method.

Arakon said:
The point is that this doesn't seem to work at this time. According to the shadowmountplus readme, this is meant to be a folder "backports" in the same path as the games, with a subfolder with the same folder name as the game.
However, it doesn't work right now, see i.e. https://github.com/drakmor/ShadowMountPlus/issues/16

thank you very much for the feedback! I tried it too and it didn't work, that's why I thought I was doing it incorrectly and searched for more info.

flopsy said:
I would also like this. Exfat images with backport on the side. Also nice for using on different systems with different fw.

How is global folder supposed to work? Arent the backpork files different for each game? Atleast eboot.bin has to be.

global folder is not useful FOR ME. as I understand, it is only to have a single fakelib folder for all games. but since every backpork comes with a fakelib folder, and I've seen more than once different fakelib folders that work for one game, but not for another.

I have a ps5 pro 9.60, the current days gone remastered backpork doesn't work for 9.60 and 10.01 pros. I had to replace the fakelib folder for the indiana jones fakelib folder, then it ran. pro modes aren't available, tho. it's a known bug, but devs are focused in more important things now.

Little Nightmares III didn't work too for me and other ps5 pro users. Replacing the fakelib folder worked too, but it was from another game, Gears of War if I remember well.

Post automatically merged: May 18, 2026

wxanges said:
I downloaded a backup where I saw there are 24 lua saves, but don't I have to re-sign them for my console?

as soon as you restore that backup, you will only have the user that was present on the console which the backup was made from, so you won't have to resign anything.

your current user won't be registered on your console anymore, and of course, you'll lose its psn activation on your console, if it existed before the restore.

szczuru · May 18, 2026

I'm on 12.40 with PS5 fat w/disc drive. What are my options? I don't have star wars nor any lua game. Need to wait for y2jb or netflix hack yo be updated to 12.40 for use with p2jb?

wxanges · May 18, 2026

Can you give me a link to a backup with LUA saves?

ThePSGuy · May 18, 2026

Theone5000 said:

Sorry to bother you, I already read your detailed post but wanted to react to this specific tweet. I don't have a digital console so I'm not even concerned but I would like to understand for my personal knowledge.

How is chaining P2JB to Y2JB going to help digital console owners exactly? I heard P2JB kernel panic when closing the userland game on firmwares higher than 12.00 so isn't it only really useful for folks up to 12.00 that don't own the Star Wars disc to unpatch the Blu-ray drive and use BD-UN-JB chained with Poopsploit afterwards?

The fact that Poopsploit can only be chained with Star Wars and BD-UN-JB thus making it impossible to chain it with Y2JB or NFNH would automatically exclude digital console owners right?

Or maybe that Twitter user is assuming those people (up to 12.00) will use P2JB chained with Y2JB one time then only use rest mode by never turning off their console?

Retrojunkies · May 18, 2026

Theone5000 said:
Why not use 127.0.0.1 or 127.0.0.2 in this case?

That's originally what I tried but it'd fail to connect to my router.

And I am not 100% if this dns tool would be safe to get online while blocking all updates.

I don't get why my console auto tries updating even when its disabled in the settings to not auto update.

lufeig · May 18, 2026

looks like "someone else" found out how to unlock trophies on jb ps5

madbrainx · May 18, 2026

ThePSGuy said:
Sorry to bother you, I already read your detailed post but wanted to react to this specific tweet. I don't have a digital console so I'm not even concerned but I would like to understand for my personal knowledge.

How is chaining P2JB to Y2JB going to help digital console owners exactly? I heard P2JB kernel panic when closing the userland game on firmwares higher than 12.00 so isn't it only really useful for folks up to 12.00 that don't own the Star Wars disc to unpatch the Blu-ray drive and use BD-UN-JB chained with Poopsploit afterwards?

The fact that Poopsploit can only be chained with Star Wars and BD-UN-JB thus making it impossible to chain it with Y2JB or NFNH would automatically exclude digital console owners right?

Or maybe that Twitter user is assuming those people (up to 12.00) will use P2JB chained with Y2JB one time then only use rest mode by never turning off their console?

Kernel panics with the remote Lua loader are just an unresolved coding issue, not something unfixable. A more experienced dev could probably sort it out eventually, but right now the focus may be on a Y2JB implementation since it would benefit more users, including both digital and disc PS5s up to fw 12.40.

People with digital >10.01 or disc PS5s >12.00 will still need to use P2JB, and Lua games should also end up being useful for disc PS5 users on 12.60 and 12.70 until there’s a new webkit exploit, a dupless poopsploit or a brand new kernel exploit.

_iggyman_ · May 18, 2026

Retrojunkies said:
I don't get why my console auto tries updating even when its disabled in the settings to not auto update.

The same thing is with the PS4 console
(disable options does not help and works)

"Thanks" Sony

HS2005 · May 18, 2026

ThePSGuy said:
Sorry to bother you, I already read your detailed post but wanted to react to this specific tweet. I don't have a digital console so I'm not even concerned but I would like to understand for my personal knowledge.

How is chaining P2JB to Y2JB going to help digital console owners exactly? I heard P2JB kernel panic when closing the userland game on firmwares higher than 12.00 so isn't it only really useful for folks up to 12.00 that don't own the Star Wars disc to unpatch the Blu-ray drive and use BD-UN-JB chained with Poopsploit afterwards?

The fact that Poopsploit can only be chained with Star Wars and BD-UN-JB thus making it impossible to chain it with Y2JB or NFNH would automatically exclude digital console owners right?

Or maybe that Twitter user is assuming those people (up to 12.00) will use P2JB chained with Y2JB one time then only use rest mode by never turning off their console?

NP.

P2JB indeed causes a KP after closing the game using remote lua loader. If you close the game you need to run P2JB again.
This is why you need to patch the bdstack with the .elf file provided after a succesfull P2JB run.
After that you can use the regular BD-UN-JB iso or a autoloader iso. I use the autoloader iso. So that you don't have to wait for 2 hours again using P2JB. Just use the disc and your ready to go.

This is the autoloader I use: https://github.com/itsPLK/ps5-bdjb-autoloader/releases

If you don't have SWRR your options are Lua games. Because LuaC0re == not the same as Lua. I used Lua to go to 12.00.

ThePSGuy · May 18, 2026

madbrainx said:
Kernel panics with the remote Lua loader are just an unresolved coding issue, not something unfixable. A more experienced dev could probably sort it out eventually, but right now the focus may be on a Y2JB implementation since it would benefit more users, including both digital and disc PS5s up to fw 12.40.

People with digital >10.01 or disc PS5s >12.00 will still need to use P2JB, and Lua games should also end up being useful for disc PS5 users on 12.60 and 12.70 until there’s a new webkit exploit, a dupless poopsploit or a brand new kernel exploit.

Thanks for the answer but I still don't get it about the digital PS5 part of your reply:

"the focus may be on a Y2JB implementation since it would benefit more users, including both digital and disc PS5s up to fw 12.40."

P2JB is a 2 hours kernel exploit so what are digital console owners supposed to gain from it if they can't use it to unpatch the Blu-ray drive that they obviously don't have? I reckon most folks won't even bother waiting 2 hours each and every time they turn on their PS5.

The only benefit I would see for those people is if they never turn off their console and only use rest mode so that the tethered jailbreak stays active. Or maybe I am missing something else here?

littlemisskittn · May 18, 2026

madbrainx said:
Kernel panics with the remote Lua loader are just an unresolved coding issue, not something unfixable. A more experienced dev could probably sort it out eventually, but right now the focus may be on a Y2JB implementation since it would benefit more users, including both digital and disc PS5s up to fw 12.40.

People with digital >10.01 or disc PS5s >12.00 will still need to use P2JB, and Lua games should also end up being useful for disc PS5 users on 12.60 and 12.70 until there’s a new webkit exploit, a dupless poopsploit or a brand new kernel exploit.

I think EchoStretch is trying to fix that.

ThePSGuy · May 18, 2026

Theone5000 said:
NP.

P2JB indeed causes a KP after closing the game using remote lua loader. If you close the game you need to run P2JB again.
This is why you need to patch the bdstack with the .elf file provided after a succesfull P2JB run.
After that you can use the regular BD-UN-JB iso or a autoloader iso. I use the autoloader iso. So that you don't have to wait for 2 hours again using P2JB. Just use the disc and your ready to go.

This is the autoloader I use: https://github.com/itsPLK/ps5-bdjb-autoloader/releases

If you don't have SWRR your options are Lua games. Because LuaC0re == not the same as Lua. I used Lua to go to 12.00.

Thanks for the tips about the autoloader, this is what I will be using on my disc based 12.00 very soon.

While we are at it, what is the difference between the one you just linked (from itsPLK) and this one from owendswang? : https://github.com/owendswang/BD-UN-JB-Poops-Autoloader

Also, to get back to the subject, I get what you are saying for disc based consoles but this obviously doesn't apply to digital consoles so my question remain: how is a port of P2JB to Y2JB going to benefit those people?

HS2005 · May 18, 2026

ThePSGuy said:
Thanks for the answer but I still don't get it about the digital PS5 part of your reply:

"the focus may be on a Y2JB implementation since it would benefit more users, including both digital and disc PS5s up to fw 12.40."

P2JB is a 2 hours kernel exploit so what are digital console owners supposed to gain from it if they can't use it to unpatch the Blu-ray drive that they obviously don't have? I reckon most folks won't even bother waiting 2 hours each and every time they turn on their PS5.

The only benefit I would see for those people is if they never turn off their console and only use rest mode so that the tethered jailbreak stays active. Or maybe I am missing something else here?

He's not wrong. So here's the thing:

Poopsploit kernel exploit support: up to FW 12.00
P2JB/Patience chain: up to FW 12.70 (different exploit chain, not Poopsploit)

Digital users will benefit from Y2JB because no disc should be required, where now it is required to even load a KEX. The idea is to run the Y2JB application and load the KEX. So both are ported together. I don't know the exact method (yet) and what's needed. This because a dev is working on it as we speak.

If I have more info I will share it (if @KiiWii doesn't race me for it)

PS5 Hack Status:

Preparing Your Console:

Select Your Jailbreak:

Additional Information:

Warnings:

Archived Information

Well-Known Member

Well-Known Member

Attachments

The destroyer of worlds

Well-Known Member

Fickly Member

Member

Fickly Member

Well-Known Member

Well-Known Member

Member

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

The destroyer of worlds

Well-Known Member

SQUIRRELY WRATH!

Well-Known Member

The destroyer of worlds

Similar threads

Popular threads in this forum