Toggle sidebar

Tutorial  Updated

PS5 Exploit Guide

PS5 Hack Status:

FW Ranges:
2.XX = HEN+Kstuff+HV = PS4/5 backups, possible keys exploit (WebKit: 2.50 best / 2.7X max)
3.XX = HEN+Kstuff+HV+Linux = PS4/5 backups, possible keys exploit (WK/BDJB/LUA: 3.20 best / 3.21 max)
4.XX = HEN+Kstuff+HV+Linux = PS4/5 backups (WK/Y2JB/BDJB/LUA: 4.50 best / 4.51 max)
5.XX = HEN+Kstuff+HV+Linux = PS4/5 backups (WK/Y2JB/BDJB/LUA: 5.50 best + max)
6.XX = HEN+Kstuff = PS4/5 backups, HV+Linux for 6.02 max (Y2JB/BDJB/LUA: 6.50 best + max)
7.XX = HEN+Kstuff = PS4/5 backups, no HV (Y2JB/BDJB/LUA: 7.61 best + max)
8.XX-10.01 = HEN+ Kstuff = PS4/5 backups, no HV (Y2JB/LUA)
10.20-12.00 = KEX + Kstuff = PS4/5 backups, no HV (LUA)
12.02-12.70 = KEX (P2JB/SWRR)
13.XX = No KEX/HEN/Kstuff/HV (LUA)

NOTE: Recommended firmware is subjective. Staying low is always suggested first & foremost. It is not recommended to update too many major versions (e.g., 4.xx to 5.xx or 7.xx to 8.xx) because you should remain low unless all you want is backups.

DO NOT UPDATE OVER 12.00!! P2JB can take over 3 hrs to trigger an exploit.

Hypervisor (HV):
Highest known HV exploit: 6.02
Highest theoretical HV exploit: 7.XX
Highest implemented HV exploit: 1.00-4.51 (Cragson PS5Hen) / 3.00-6.02 (TheFlow)
*unreleased/unimplemented

Kernel (KEX):
Highest public Release: 12.70
Highest known: 12.70 (P2JB)
UMTX2: 1.00-7.61
Lapse: 1.00-10.01
Poopsploit: 4.XX-12.00
P2JB: X.XX-12.70

Userland (UL):
LUA: 2.00-LATEST (LUA game exploit, chain Lapse up to 10.01)
Y2JB: 4.03-12.60 (YouTube exploit, + Lapse up to 10.01)
NFNH: 4.03-12.XX (Netflix exploit, + Lapse up to 10.01)
YARPE: 4.03-12.XX (Ren'Py exploit, + Lapse up to 10.01)
BD-JB: 1.00-7.61 (Blu Ray exploit + UMTX2, 8.00-12.40 via UN BD JB + Poopsploit)
Webkit: 1.00-5.50 (PSFREE +UMTX2) (up to 13.20 coming soon)
Mast1C0re: 1.00-7.61 (PS2 backups)
LuaC0re: 10.20-12.02 (Star Wars RR: + Poopsploit up to 12.00)

NOTE: A userland entry exploit (UL) chained to kernel exploit (KEX) is required at a bare minimum to exploit your console.

NOTE 2: Since 12.60/13.00 Sony has removed the YouTube and Netflix apps and has added 30 day expirations to downloaded software used for LuaC0re/Mast1C0re/RenPy etc.

Digital consoles will now need a new webkit userland to hack their consoles as of 19/04/2026)

Useful Applications:
Elf loader: 8.00/7.61 HERE (use with BD-J)
Kstuff: 3.00-10.01 (3.00-12.70 soon) HERE
Kstuff Lite: 3.00-12.70 HERE
Kstuff Toggle: 3.00-12.00 HERE
Dumping: Up to 8.00/7.61 (ItemzFlow / self decryptor) latest HERE
PS5 App Dumper: 3.00-12.00 HERE
Dump Runner: 3.00-12.00 HERE
Dump Installer: 3.00-11.60 HERE
Backporting: Possible (backpork / Porkfolio)
PS4/PS5 DLC: Work with kstuff (on retail disc games)
Homebrew Enabler: etaHEN (3.00-10.01) latest HERE
PS5 Backup Loading: Itemzflow HERE Compatibility list: HERE
PS4 Backup Loading: FPKG Enabler 3.XX-9.XX (rest mode & backports work, can crash).
PS5 Debug: Works HERE
PS5 Remote Play: Works HERE & HERE
PS5 Trainers/Cheats: Work (Built into itemzFlow)

UART: HERE
Linux: (3.00-6.02) HERE
Kldload (wip): 3.00-6.50 HERE
Full chain exploit: 1.00-4.51 (byepervisor) HERE (also built into etaHEN up to 2.7X)
PSN access: NEVER
Latest OFW: 13.40 (04/06/26)
Summarised OFW/Model guide: HERE
1.XX-7.61 compatibility list: HERE
PS5 SDK Repo: HERE
Legit PKG Updates: HERE or HERE
OFW Updates: HERE (history HERE)

Preparing Your Console:

It is recommended to either self-host offline or block these addresses in your router to avoid accidental updates or getting an update nag. Using the DNS method is no longer failsafe, as these are not guaranteed to be running 24/7.


dau01.ps5.update.playstation.net
dbr01.ps5.update.playstation.net
dcn01.ps5.update.playstation.net
deu01.ps5.update.playstation.net
dhk01.ps5.update.playstation.net
djp01.ps5.update.playstation.net
dkr01.ps5.update.playstation.net
dmx01.ps5.update.playstation.net
dru01.ps5.update.playstation.net
dsa01.ps5.update.playstation.net
dtw01.ps5.update.playstation.net
duk01.ps5.update.playstation.net
dus01.ps5.update.playstation.net
fau01.ps5.update.playstation.net
fbr01.ps5.update.playstation.net
fcn01.ps5.update.playstation.net
feu01.ps5.update.playstation.net
fhk01.ps5.update.playstation.net
fjp01.ps5.update.playstation.net
fkr01.ps5.update.playstation.net
fmx01.ps5.update.playstation.net
fru01.ps5.update.playstation.net
fsa01.ps5.update.playstation.net
ftw01.ps5.update.playstation.net
fuk01.ps5.update.playstation.net
fus01.ps5.update.playstation.net
hau01.ps5.update.playstation.net
hbr01.ps5.update.playstation.net
hcn01.ps5.update.playstation.net
heu01.ps5.update.playstation.net
hhk01.ps5.update.playstation.net
hjp01.ps5.update.playstation.net
hkr01.ps5.update.playstation.net
hmx01.ps5.update.playstation.net
hru01.ps5.update.playstation.net
hsa01.ps5.update.playstation.net
htw01.ps5.update.playstation.net
huk01.ps5.update.playstation.net
hus01.ps5.update.playstation.net
sgst.prod.dl.playstation.net
gs2.ww.prod.dl.playstation.net

Alternative DNS IP:
DNS 1: 172.245.146.114
(Leave DNS 2 blank)

To determine your OFW version:
Go to settings > system > console information.

Version string info:
Year.Half (1st/2nd half of the year)-Major Version No.Minor Version No.Extended info-Further Info.Retail/Debug

21.02-04.03.00.00-00.00.00.0.1

It is recommended to keep your console as low as possible to have access to better jailbreak stability and features. Stay as low as possible within the "Golden" firmware brackets that apply to your current firmware.

Current Examples:
2.00 could be updated to 2.50 maximum to retain Webkit/BD-JB/LUA HV + KEX + HEN.
4.00 could be updated to 4.51 maximum for WebKit/BD-JB/LUA + KEX + HEN + potential HV exploits.
5.00 could be updated to 5.50 maximum for WebKit/BD-JB/LUA + KEX + HEN.
6.XX-7.XX could be updated to 7.61 maximum for HEN using only BD-JB or LUA.
Digital/Pro users on 6.XX-LATEST cannot use BDJB or LUA without an activated console. Wekbit does not go beyond 5.50 for now.
Digital/Pro users or Disc console users on 8.XX-LATEST should consider waiting or selling/swapping consoles to get a lower firmware.
(No jailbreak is ever guaranteed. No developer is obliged to release anything publicly)

WARNING:
Only update OFW manually via USB by getting the firmware file from HERE and installing from <USB>:/PS5/UPDATE/PS5UPDATE.PUP

SYSTEM UPDATES:

12.00 SYS MD5: 79d3171ec4ef38ca27f8ff36a9940847 (Exploited - No HEN yet)
10.01 SYS MD5: 68a31944c1867bf9643798fd1c14998e (Exploited + HEN)
9.00 SYS MD5: e74ddccd3360941ca24475c13195e031 (Exploited + HEN)
8.00 SYS MD5: 7616128c57581d5e49b42d1b3f308232 (Exploited + HEN)
7.61 SYS MD5: d5eca8b171a8d7df7ba225167f77e645 (Exploited + HEN)
6.50 SYS MD5: 98db854ba47a75dff0cb09355bca9025 (Exploited + HEN)
5.50 SYS MD5: edb3513ec531b2bd28f3a0b52a82a54f Exploited + HEN)
4.51 SYS MD5: 1330b7bf63bf5c93d809b1eb1f4e1f01 (Exploited + HEN)
4.03 SYS MD5: 3716e4e6e0d223cd94cd4a8e5bd4fb94 (Exploited + HEN)

RECOVERY UPDATES (wipes HDD):
12.00 REC MD5: f993e4c35ed6659b516346941980de4b (Exploited - no HEN yet)
10.01 REC MD5: 5202be086fc726d881f722d46e4486c6 (Exploited + HEN)
9.00 REC MD5: 6fbbda82c325bb5d6ec0717c2223b5c0 (Exploited + HEN)
8.00 REC MD5: 6cbb7a2fa2ace926202bd6e71304fb06 (Exploited + HEN)
7.61 REC MD5: 932f24e934723050fe49561b67e95226 (Exploited + HEN)
6.50 REC MD5: 4305223c12bd6dda9b944c0ee49c94c0 (Exploited + HEN)
5.50 REC MD5: c939ac8b37e07bbc129816a61002d30a (Exploited + HEN)
4.51 REC MD5: da78ca268da90a963d89b0f45db0f061 (Exploited + HEN)
4.03 REC MD5: e6dcc800d8d1dcada4f2bcd6e7ff162c (Exploited + HEN)

PS5 factory mode PUP installation path:
/usb/PROSPERO/UPDATE/PROSPEROUPDATE.PUP

Select Your Jailbreak:

WEBKIT (1.00-5.50):BD-JB 1.00-7.61:LUA (2.00-LATEST):Mast1c0re (2.00-7.61):Y2JB (4.03-10.01):NFNH (4.03-10.01):YARPE (4.03-10.01):LuaC0re (12.00 REQUIRES SWRR):BD UN JB (REQUIRES JB'D CONSOLE):


  1. PSFREE 1.XX-5.XX: https://github.com/kmeps4/PSFree
    Recommended host: https://zecoxao.github.io/luasauce/ (UMTX2 + Webkit for 1.XX-5.XX)

    Recommended WebKit hosts:
    https://zecoxao.github.io/luasauce/
    (UTMX2 with Lua and WebKit for 1.xx-5.xx)
    https://zecoxao.github.io/umtx/ or https://es7in1.site/
    (UMTX 2 exploit works on 3.00-5.50 with PSFREE WebKit)

    Alternative hosts:
    https://zecoxao.github.io/ps5jb/
    https://ps5jb.pages.dev/
    https://sleirsgoevy.github.io/ps4jb2/ps5-403/index.html

  2. You will need a BD dive paired to your Slim/Pro console, or an OG Phat model on 1.00-7.61 to run this exploit.

    Viktorious AIO Auto BD-JB ISO for 4.XX-7.61: https://github.com/Viktorious-x/ps5-bdjb-modified-ISOs/releases
    (Alternative: UMTX Kernel exploit 7.61 JAR loader by Hammer83: https://github.com/hammer-83/ps5-jar-loader/releases)

    Burn ISO to a blank BD-R or BD-RE, put it into your console, and click on the [DISC PLAYER] icon.
    Highlight [PIPELINE RUNNER] then click option 2 [Normaljailbreak-etaHEN-UMTX1.pipe] to auto load etaHEN ready for ItemzFlow.
    Debug settings will be loaded, and the package installer can be found under [SETTINGS] > [DEBUG SETTINGS].
    ELF Loader will be running on your PS5 IP: port 9021


  3. Important:
    Up to 10.01 has a kernel exploit + HEN
    11.XX-12.70 has a kernel exploit but no HEN yet.
    LUA entry point works on the latest OFW, but there is no kernel or HEN yet.
    (A compatible PS4 game is required to launch the exploit on PS5. See below)

    Your PS5 console must be activated to use save copying for PS4 games.

    1. Insert your game disc and, as soon as possible, make a save file within it.
    2. Copy the save files to USB, go to [SETTINGS] > [STORAGE] > [CONSOLE STORAGE] > [SAVE DATA] > [PS4 GAMES] > select the game save and copy to a USB drive.
    3. On PC, using a Google Drive account, make a new folder with the GAME ID of your game, and upload the savedata & savedata.bin files to that folder.
    4. Share the folder, set it to editor mode, share with anyone, and click "copy the link".
    5. Join the HTOS Discord group: HERE type "/decrypt", select "FALSE" for including SCE_SYS, paste or type in the Google Drive link, and press enter. The bot should begin mounting your save. (If it doesn't, paste in the link again.)
    6. Click "ENCRYPTED" to remove the Sony PFS layer. Download the generated files and extract the folder to your desktop (you should have 4 files in there and be named dec_savedata_CUSA[GAME ID]).
    7. Using REMOTE LUA LOADER, open the savedata folder, copy the 20 files within into your encrypted save folder on your desktop.
    8. Upload the encrypted save folder (now with 24 files in) to your Google Drive. It should be named "dec_savedata_CUSA[GAME ID]" where GAME ID is your games 5 digit number, and set it to editor mode, share with anyone, and then click "copy the link".
    9. Go back to the HTOS discord server, and type "/encrypt", hit "FALSE" for uploading individually, and "FALSE" to include SCE_SYS. Finally, hit shared_gd_link and paste in your link to the original save (4 files) folder. (If it doesn't, paste in the link again.)
    10. When this is done, paste the link to the decrypted save (24 files) folder, and the bot will encrypt the files.
    11. Resign the files by typing "/resign" followed by your account name on the console, or PSN ID associated with that account if using the latest OFW.
    12. Download the resigned files, extract the files to your USB drive and overwrite them into the savedata folder on your USB or external drive.
    13. Copy the saves back to your console [SETTINGS] > [SAVE DATA AND GAME/APP SETTINGS] > [SAVE DATA PS4] > [COPY OR DELETE FROM USB] > [COPY TO CONSOLE STORAGE] > select your game save folder from the USB drive and copy/overwrite old save data.
    14. Load LUA game again, and you should see the LUA LOADER screen.
    15. You can use "SEND_LUA.PY" to send the UMTX files to the loader.
    (NOTE: Some games require manual loading of save game)

    On firmware up to 7.61, you can now load UMTX/2 followed by etaHEN by sending the files to your console IP on PORT 9026.
    On firmware 8.00-LATEST, you can connect with the REMOTE LUA LOADER APP to send debug notifications or FTP on port 1337.

    LUA Loader: HERE or HERE

    Auto LUA Loader Fork: HERE

    Compatible LUA games:
    Aerial Life (CUSA17122)
    Aibeya (CUSA17068)
    Aikagi 2 (CUSA19556)
    Aikagi Kimi to Issho ni Pack (CUSA16229)
    Aikano Yukizora no Triangle (CUSA19370)
    Boku to Nurse no Kenshuu Nisshi (CUSA12049)
    Boku to Joi no Shinsatsu Nisshi (CUSA18107)
    Fuyu Kiss (CUSA29745)
    Hamidashi Creative (CUSA27389)
    Hamidashi Creative Demo (CUSA27390 requires the latest OFW to download from PSN)
    Haruoto Alice (CUSA14324)
    IxSHE Tell (CUSA17112)
    IxSHE Tell Demo (CUSA17126)
    Jinki Resurrection (CUSA25179)
    Jinki Resurrection Demo (CUSA25180 requires the latest OFW to download from PSN)
    Maid-san no Iru Kurashi (CUSA18106)
    Nora Princess and Stray Cat Heart HD (CUSA13303: Rename save9999.dat into nora_01.dat)
    Nora Princess and Strat Cat Heart 2 (CUSA13586)
    Raspberry Cube (CUSA16074)
    Winter Guest (CUSA11977)

    WARNING: using demos is free but can become corrupt, and you cannot upgrade your internal HDD either. If you lose the demo you can no longer use the exploit.Disc recommended.

    Incompatible LUA games:
    Dokyusei Remake Csver (CUSA47117)
    Dōkyūsei: Bangin' Summer - Home Edition Demo (CUSA47132)
    Kiss Trilogy (CUSA19341)
    Love Clear Demo (CUSA18109)
    Mikagami Sumika no Seifuku Katsudou (CUSA11481)
    Sen no Hatou, Arazone no Hime (CUSA09647)
    Tonari ni Kanojo no Iru Shiawase: Two Farce (CUSA09825)
    Tonari ni Kanojo no Iru Shiawase Summer Surprise (CUSA18998)

  4. PS2 Classics > Userland via CTurt:
    (Implementation by McCaulay)
    Note: this is currently limited to swapping the loaded PS2 iso, or loading PS2 elf homebrew on PS5 (or PS4) for emulators or basic PS2 brew.

    Mast1c0re PS2 exploit for PS2 homebrew:
    https://cturt.github.io/mast1c0re.html

    Mast1c0re part 2:
    https://cturt.github.io/mast1c0re-2.html

    Mast1c0re payload framework:
    https://github.com/McCaulay/mast1c0re

    Okrager save game exploit generator for Okage:
    https://github.com/McCaulay/okrager

    Mast1c0re payloader TCP Client GUI for PS5 6.50:
    https://github.com/Master-s/PS4-PS5-Mast1c0re-Payloader/releases

    TCP network ISO loader:
    https://github.com/McCaulay/mast1c0re-ps2-network-elf-loader/releases

    ExFat USB ISO loader:
    https://github.com/McCaulay/mast1c0re-ps2-usb-game-loader/releases

  5. coming soon

  6. coming soon

  7. coming soon

  8. coming soon

  9. This method modifies the BD-J stack to allows BDJB to be re-enabled on your higher firmware console up to 12.40.

    This requires your console to be hacked via another method first to gain access to alter the files.
    (For example 12.00 needs SWRR disc to hack it first)

    https://github.com/Gezine/BD-UN-JB

    DO NOT REINSTALL FW, IT WILL WIPE THE PATCH AND LOSE BD-JB


Additional Information:

PS4 GAME INFORMATION:
OFW 1.xx cannot run PS4 games.
OFW 2.xx runs PS4 games up to 8.03
OFW 3.xx runs PS4 games up to 8.52
OFW 4.xx runs PS4 games up to 9.04
OFW 5.xx runs PS4 games up to 9.60
OFW 6.xx runs PS4 games up to 10.50
OFW 7.xx runs PS4 games up to 11.00
OFW 8.xx/9.xx runs PS4 games up to 11.50
OFW 10.xx runs PS4 games up to 12.00
OFW 11.xx runs PS4 games up to 12.50
OFW 12.xx runs PS4 games up to 13.00

(Note: PS4 backported FPKGs also work perfectly on an exploited PS5 with Kstuff)

You can install free/demo PKGS (legit pkgs) via the debug pkg installer, provided you have all the files/json/licences required.
(Astro’s Playroom has no licences and can be installed and played from official pkgs and updated inline with your firmware)

Warnings:

1: Never enable IDU mode.
If you do, you will need to enter staff mode by holding L1 + L2 and tapping this combo: circle, cross, square, triangle, right D-Pad. Release L1 + L2, and you can access settings to exit IDU.

2: Try to stay on the lowest FW possible and wait for hacks on that firmware.

3: PS5 FPKGs do not work. A hack for the A53 processor does not publicly exist to enable installing PS5 content as FPKG/PKG.

4: Installing legit game PKGs you do not own will never work, even if spoofed.

5: If you get stuck in a boot loop at the PS logo, the SNVS is corrupted (if the hash check fails on boot, this causes a “soft brick”). It’s not “bricked”. Simply reinstall your current firmware RECOVERY PUP in safe mode from USB: PS5 > UPDATE > PS5UPDATE.PUP.

Archived Information

https://github.com/astrelsky/libhijacker

https://github.com/illusion0001/libhijacker

https://github.com/TheOfficialFloW/Presentations/blob/master/2022-hardwear-io-bd-jb.pdf

https://github.com/sleirsgoevy/bd-jb

https://github.com/psxdev/bd-jb

https://gbatemp.net/download/remount-system-with-write-permissions.37807/

https://github.com/john-tornblom/ps5-payload-sdk

https://github.com/john-tornblom/bdj-sdk/actions/workflows/bdjb.yml
 
Last edited by KiiWii,
  • Like
  • Love
  • Haha
Reactions: johnfr13d, rogerramjet, pippihuhu and 92 others
Click to expand...
HS2005 said:
What (error) messages do you get?
If the elf loader did not load and you are not able to use debug settings or this is not visible you did net get a proper Kernel rewrite. You have to load p2jb again. So via netcat send p2jb.py
Click to expand...
My screen looks exactly like yours just no debug settings...
 
BobaFett_UK said:
Bugger, bugger, bugger!!

So here's the thing... I managed to download the save to the usb... over to garlic saves and did the reassign to my user id... plugged the usb into the console... I could see the save but the damn save will not copy across!!!! Turned on the network, console said update firmware to use network features blah blah... so i'm a bit stuck here....

I don't want to restore a backup as that will mean losing all my stuff... any ideas?
Click to expand...
So you made your LuaC0re save on your 9.05 system I suppose and now want to transfer that save to your 11.60 but you can't do that right?

Your 11.60 console is retail so you cannot do any JB related stuff because you don't have JB in any form. That's the reason back-ups are created and for public download in order for you to manipulate your retail console. Either by Netflix-N-Hack or Y2JB.

This is what I did when I was on 9.60. I used the M2 slot/drive with the Netflix-n-hack image drive so that everything on my console stayed, including the data. I removed a couple of things from my M2 to the console storage. And via my M2 drive I got things kickin'. I directly copied the Nextflix app to my console and started from there in case my M2 died or needed to be formatted again.
 
HS2005 said:
So you made your LuaC0re save on your 9.05 system I suppose and now want to transfer that save to your 11.60 but you can't do that right?

Your 11.60 console is retail so you cannot do any JB related stuff because you don't have JB in any form. That's the reason back-ups are created and for public download in order for you to manipulate your retail console. Either by Netflix-N-Hack or Y2JB.

This is what I did when I was on 9.60. I used the M2 slot/drive with the Netflix-n-hack image drive so that everything on my console stayed, including the data. I removed a couple of things from my M2 to the console storage. And via my M2 drive I got things kickin'. I directly copied the Nextflix app to my console and started from there in case my M2 died or needed to be formatted again.
Click to expand...
My 9.xx system is just running Y2JB as normal.... no SWRR on it as it's a digital system..

My 11.60 system cannot it seems now copy usb data back from the usb to the console... I can't get my head around what's happened.... I have previously been able to copy over ps4 saves so i'm a tad perplexed on what's happened....

Of course I suppose i can get a M.2 drive but that's another £200 which i don't need to spend... Worse case i lose what's on my console... annoying though..
 
yonasz said:
My screen looks exactly like yours just no debug settings...
Click to expand...

Execute P2JB via netcat again. Sit in front of your screen when the P2JB is almost finished. You will have to see this in the exact run.

If it's correctly jailbroken but debug menu and / or the .elf loader is not spawned you have to rerun again. This image below is what you need to have. If not. It did not work.

1780327515557.png


Just make a video when the eta is like 1 minute to see for yourself what messages are displayed.
Post automatically merged:

BobaFett_UK said:
My 9.xx system is just running Y2JB as normal.... no SWRR on it as it's a digital system..

My 11.60 system cannot it seems now copy usb data back from the usb to the console... I can't get my head around what's happened.... I have previously been able to copy over ps4 saves so i'm a tad perplexed on what's happened....
Click to expand...
It does not matter now. You are stuck because you cannot execute your save.
Use https://github.com/NetflixNHack/Netflix-N-Hack. It goes up to 12.xx. and copy the image on your M2. This is the reason why I have an internal and external M2. Always have multiple options.
 
  • Like
Reactions: solitaire4eva, _iggyman_, zebrone and 2 others
OK, this is interesting... i tried my retail PSN activated account and USB copy/save is active! Yet on my Japanese retail account id it is not.... Don't really want to use my retail account to JB. However, I have used it in the past to no ill effect... So here's my thinking... use my retail account... JB the console... Create a new User1 account and then activate that and np-fakesign that one and voila.... should work yes?
 
  • Like
Reactions: SonyUSA, solitaire4eva and flopsy
BobaFett_UK said:
Bugger, bugger, bugger!!

So here's the thing... I managed to download the save to the usb... over to garlic saves and did the reassign to my user id... plugged the usb into the console... I could see the save but the damn save will not copy across!!!! Turned on the network, console said update firmware to use network features blah blah... so i'm a bit stuck here....

I don't want to restore a backup as that will mean losing all my stuff... any ideas?
Click to expand...
netflix.
 
  • Like
Reactions: solitaire4eva
BobaFett_UK said:
OK, this is interesting... i tried my retail PSN activated account and USB copy/save is active! Yet on my Japanese retail account id it is not....
Click to expand...
Wierd indeed. Never had this on my PSN activated account. You sure you didn't used this?
Sprays for multiple accounts...

1780329644616.png
 
  • Haha
  • Like
Reactions: solitaire4eva, Silla79, flopsy and 4 others
Rasa39 said:
Btw anyone still having issues with the sound on Saros, the games needs to be packed up. I recently extracted all my exfat dumps again to see how they perform, since Crimson desert is unplayable when packaged, but works fine as raw folders.

In doing so I got the sound glitch on Saros, so I bundled it back into an exfat and boom, sound works fine again, very odd.

Also does Stellar Blade use the APR? I wondered why there's no public dump, but my disc copy says it needs fw 8.40. I'm on 6.02 and was trying to see if I could use the new spoof to get it running or usable with a backpork.

Sadly the spoofer just crashes my system though, the one included with elf-arsenal.
Click to expand...
How i repack the game? thanks
 
  • Like
Reactions: solitaire4eva
ThePSGuy said:
Thanks, that means my account should still be activated. I will just go ahead and try Y2JB without messing with activation and if I encounter any sign-in issue then I know it will most likely be related, simple as that. :)


Oh nice, thanks for the tip, it is indeed a very simple way to check.

Also, congrats on the upgrade, 12.00 seems to be the sweet spot right now (and will probably be for a long time) if not interested by Linux!
Click to expand...
Reporting back on this subject: even though I don’t have Remote Play and the ability to transfer PS4 savegames to USB anymore, it appears that my account is still (kinda) legit activated as I have access to the log-in options by pressing the Options button on the account selection screen.

Anyway, I tried loading Y2JB and can confirm that it does work on a legit activated account even if it says otherwise on the GitHub instructions page. :D

For some reason, I encounter two PSN pop-ups upon launching the YouTube app (that I don’t see on ModdedWarfare latest video) but they can easily be dismissed.

Thanks to everyone who helped me avoiding the fake activation hassle!
 
  • Like
Reactions: madbrainx, yonasz and schatzi24
kaeseins said:
Have you enabled or disabled 3D Audio?
Click to expand...
It seems to be a game issue, people have reported it happening regardless of 3d audio, I even turned 3d audio on and still had no issues.

For some reason it seems to be whenever you run the game with loose folders, converting it to exfat makes the issue go away, I don't know about ffpkg, but I assume it works all the same.

Both from internal m.2 or external USB, I never had audio issues when formatted as exfat, but in both cases the audio problem exists when I have the loose game folder.

It seems to be unrelated to 3d audio for once. I'm wondering if maybe bestpig hasn't done an audio fix for this one yet, as it seems to work when packaged, whereas other games still had audio issues even with a packaged format and therefore needed an audio fix.

I wonder what other games might have this same issue, maybe it depends on what SDK it was built for or how the dev implements audio?
 
HS2005 said:
Execute P2JB via netcat again. Sit in front of your screen when the P2JB is almost finished. You will have to see this in the exact run.

If it's correctly jailbroken but debug menu and / or the .elf loader is not spawned you have to rerun again. This image below is what you need to have. If not. It did not work.

View attachment 575948

Just make a video when the eta is like 1 minute to see for yourself what messages are displayed.
Post automatically merged:


It does not matter now. You are stuck because you cannot execute your save.
Use https://github.com/NetflixNHack/Netflix-N-Hack. It goes up to 12.xx. and copy the image on your M2. This is the reason why I have an internal and external M2. Always have multiple options.
Click to expand...
Stays like this forever
Only swrr work for me. Lua kp when loading backups.
 

Attachments

  • IMG_20260601_205921.jpg
    IMG_20260601_205921.jpg
    192.6 KB · Views: 2
  • IMG_20260601_211254.jpg
    IMG_20260601_211254.jpg
    863.1 KB · Views: 1
yonasz said:
Stays like this forever
Only swrr work for me. Lua kp when loading backups.
Click to expand...
Yeah so you are not getting the messages I get when using yarpe. Stage 2 and 3 = no success.

Keep this an favorite. You might never when you will need it: https://github.com/lz-anonz/PS5-JB-SUITE
I hope it's going to be well managed.

Anybody want to try Y2eXploit (Y2X)

Overview​

Y2eXploit (Y2X) is an autoloader with a clean ui designed to simplify and organize payload execution for Y2JB.

This particular fork of Y2JB is capable of autoloading P2JB + Lapse, autoupdating the Y2JB files from the usb with Y2JB_Updater, Autoloading Payload Manager, and it will Autoclose the YT App after it is finished loading.

Link: https://github.com/lz-anonz/Y2X/releases
 
  • Like
Reactions: _iggyman_
BD drive is now unpatched using the bdj_unpatch_1320_v2.elf from Gezine (below)

https://github.com/Gezine/BD-UN-JB/releases/tag/1.1

Next Steps?

Bit confused here... to run the kernel exploit one has to send the poops elf file... I found this link on modded's video which sends the poops file using a BD but then you need to send kstuff and the rest using netcat which is kinda useless...

https://www.mediafire.com/file/fsekat6txbyyq55/BD-JB-Poops.iso/file

However, itsPLK has this repository for a bdjb autoloader. Am i correct in thinking I can burn the iso file and this bd image will send poops and the payload manager and the rest of the gubbins?

https://github.com/itsPLK/ps5-bdjb-autoloader
 
  • Like
Reactions: HS2005, schatzi24 and solitaire4eva
qamartheone said:
i think some people are already doing it on ps5 linux
Click to expand...
It works on PSLinux.
Post automatically merged:

BobaFett_UK said:
BD drive is now unpatched using the bdj_unpatch_1320_v2.elf from Gezine (below)

https://github.com/Gezine/BD-UN-JB/releases/tag/1.1

Next Steps?

Bit confused here... to run the kernel exploit one has to send the poops elf file... I found this link on modded's video which sends the poops file using a BD but then you need to send kstuff and the rest using netcat which is kinda useless...

https://www.mediafire.com/file/fsekat6txbyyq55/BD-JB-Poops.iso/file

However, itsPLK has this repository for a bdjb autoloader. Am i correct in thinking I can burn the iso file and this bd image will send poops and the payload manager and the rest of the gubbins?

https://github.com/itsPLK/ps5-bdjb-autoloader
Click to expand...
Once its unpatched you just need to burn a poopsploit bdjb disc and you good to go. Mo more need for star wars.
 
Last edited by solitaire4eva,
  • Like
Reactions: flopsy, HS2005, SonGoku78 and 3 others

Site & Scene News

Go to forum More news

Popular threads in this forum

To all PS5 exploiters out there

11.00 or 12.00?

Hacking Homebrew  Jailbroken PS5 console risk of account ban?

Ps5 migrating APU from edm 030 to edm 010 board.

Return to stock firmware

PS5 Pro BLOD - UART codes 808C4F90 and C0020303. USB-C issue?

Homebrew  problem with uneven temperature display

Ps5 fat problem