PS5 Exploit Guide

HS2005 · 2026-06-09T19:02:46+0100

Alright, so some tests with the latest Y2JB 1.6.
Link: https://github.com/Gezine/Y2JB/releases/tag/1.6

I did not to have make use of a back-up because I can already JB my console via Yarpe. So I did that first.

After that I downloaded the YT app > loaded it and replaced the download0.dat after that.
Be sure to enter 127.0.0.2 as your DNS. If not when you start your YT app it will try to update and you are soft locked.

After setting your network settings, start the YT app. See image below.

So obviously when you send p2jb.js via Netcat GUI > port 50000 you will get this message.
It's already jailbroken due to Yarpe. Next stop > reboot.

After a reboot, start the YT again. Mind the DNS settings: 127.0.0.2
Send p2jb.js again via Netcat GUI and use port 50000.

I'll have to wait 50 minutes. But if that works you won't have to use Yarpe (Arcade Spirits) anymore.
In my case not needed, because Yarpe is faster and gives better feedback.

For virgin consoles (so if you don't have a JB console already) you will have to use the back provided by Gezine if you are on 12.60 ~ 12.70. Link: https://github.com/Gezine/Y2JB/releases/download/1.6/Y2JB_backup_1.6.12.20.zip

But at least you don't need a disc drive and / or the Arcade Spirits game.

Another disclaimer:

Do not try this on firmwares 13.00 ~ 13.40. This is NOT a KEX, but a userland Exploit.
For FW 12.60 ~ 12.70 you can use the YT patch: 01.000.030
For FW 13.00 ~ 13.40 you can use the YT patch: 01.009.202. You can access the Remote JS loader via your local IP, so PS5 IP and port 50000 on those higher firmwares but that's about it.
Unless Gezine releases his private 13.20 exploit or somebody else has a KEX this is it (for now).

A few moments later....

So this is the end result. After the elfldr has spawned close the YT app.
Use Netcat GUI > port 9021 and I send pldmgr_v0.3.1.elf
We have no autoloader (yet) for this build. So I have to send payloads manually. But now I've got a back-up in case YT breaks or Yarpe.

"This is Ripley, last survivor of the PS5 JB era, signing off."

Draco_011 · 2026-06-09T19:41:59+0100

Silenced4772 said:
Hi everyone. I was hoping to get some quick guidance. I have a 1.01 PS5 I’ve kept low to help people dump for keys and stuff. But I’d like to start actually using it for game backups and such.

Expectedly such a low firmware is basically unable to play anything. I can see there is a bunch of backports for 4.xx firmware. Is there a guide someone can point me to on how I could try and backport games to this firmware? I’ve read about APR EMU and BackPork but from what I gather this isn’t compatible on the firmware. I’m willing to do things myself just struggling to find resources that seem appropriate.

Thank you!

Welcome, in 3.x you can play few games if you want to wait a little bit longer...
With umtx you can load ETA hen and then shadowmount. Bestpig is also there but I didn't manage to make use of it.
The returnal, hitman & plague tale work with 3.x in external ssd.

BobaFett_UK · 2026-06-09T19:45:25+0100

This one is for @MohammedQ8

DON'T UPDATE

HS2005 · 2026-06-09T19:50:22+0100

BobaFett_UK said:
This one is for @MohammedQ8
DON'T UPDATE

View attachment 577269

I already saw many posts on the internet thinking that they can run 1.6 on 13.00 ~ 13.40, BUT also thinking it's a KEX.
Imagine the disappointment when they get a port 50000 screen and have no clue how to handle it

Anyway, I finished my little easy-peasy tutorial for the newest Y2JB.

yonasz · 2026-06-09T19:53:44+0100

HS2005 said:
Alright, so some tests with the latest Y2JB 1.6.
Link: https://github.com/Gezine/Y2JB/releases/tag/1.6

I did not to have make use of a back-up because I can already JB my console via Yarpe. So I did that first.

After that I downloaded the YT app > loaded it and replaced the download0.dat after that.
Be sure to enter 127.0.0.2 as your DNS. If not when you start your YT app it will try to update and you are soft locked.

After setting your network settings, start the YT app. See image below.

View attachment 577252

So obviously when you send p2jb.js via Netcat GUI > port 50000 you will get this message.
It's already jailbroken due to Yarpe. Next stop > reboot.

View attachment 577253

After a reboot, start the YT again. Mind the DNS settings: 127.0.0.2
Send p2jb.js again via Netcat GUI and use port 50000.

View attachment 577254

I'll have to wait 50 minutes. But if that works you won't have to use Yarpe (Arcade Spirits) anymore.
In my case not needed, because Yarpe is faster and gives better feedback.

For virgin consoles (so if you don't have a JB console already) you will have to use the back provided by Gezine if you are on 12.60 ~ 12.70. Link: https://github.com/Gezine/Y2JB/releases/download/1.6/Y2JB_backup_1.6.12.20.zip

But at least you don't need a disc drive and / or the Arcade Spirits game.

Another disclaimer:

Do not try this on firmwares 13.00 ~ 13.40. This is NOT a KEX, but a userland Exploit.

For FW 12.60 ~ 12.70 you can use the YT patch: 01.000.030

For FW 13.00 ~ 13.40 you can use the YT patch: 01.009.202. You can access the Remote JS loader via your local IP, so PS5 IP and port 50000 on those higher firmwares but that's about it.

Unless Gezine releases his private 13.20 exploit or somebody else has a KEX this is it (for now).

A few moments later....

So this is the end result. After the elfldr has spawned close the YT app.
Use Netcat GUI > port 9021 and I send pldmgr_v0.3.1.elf
We have no autoloader (yet) for this build. So I have to send payloads manually. But now I've got a back-up in case YT breaks or Yarpe.

View attachment 577268

"This is Ripley, last survivor of the PS5 JB era, signing off."

So witch yt app I need 1.03? I'm on 12.70fw and I have swrr/yarpe/lua .
Btw swrr works every time compared to yarpe/lua.

HS2005 · 2026-06-09T19:58:46+0100

yonasz said:
So witch yt app I need 1.03? I'm on 12.70fw and I have swrr/yarpe/lua .
Btw swrr works every time compared to yarpe/lua.

Well if you already have swrr/yarpe/lua, so same as I do and you want to use YT as well you will have to update the YT app. So you will have a disc based version JB and a digital JB.

This is what you need: https://prosperopatches.com/PPSA01650 > merge and create a PKG. The rest of the info is in my tut.

solitaire4eva · 2026-06-09T19:59:55+0100

Need a disclaimer before posting anything that remotely look like an updated full jailbreak on current firmware. The uninformed will update thinking it's okay to find out they have to pack they system away and wait.

Update: Moe already update and currently playing Fortnite

HS2005 · 2026-06-09T20:08:46+0100

BobaFett_UK said:
We should be seeing a itsPLK y2jb autoloader V0.8 out in the next day or two i guess now?

Next day? https://github.com/itsPLK/ps5-y2jb-autoloader/releases/tag/v0.8-dev-a1b152e
Developers don't sleep man.

I think that now the Gezine method works I will tinker with this release. Also due to an major elfdlr update: https://github.com/itsPLK/ps5-elfldr/releases/tag/v0.23.2-148b71c

Got some spare time so if it fails it fails. Like Drago says:

Post automatically merged: 55 minutes ago

Alright so let's test out:

v0.8-dev-a1b152e

Pre-release

Changelog:

added P2JB support for firmwares above 10.01 up to 12.70 (lower firmwares use Lapse)
added estimated progress overlay during the P2JB exploit loading phase (shifts position randomly to prevent OLED burn-in)
updated elfldr (rebuilt with latest sdk)
updated Payload Manager to v0.3.1

Full Changelog (since last stable release): v0.7-530a4ce...v0.8-dev-a1b152e

So first boot when opening the YT app.

After that the first loading screen indicator. A huge improvement:

The loadbar gives the proper feedback:

yonasz · 2026-06-09T20:34:07+0100

HS2005 said:
Well if you already have swrr/yarpe/lua, so same as I do and you want to use YT as well you will have to update the YT app. So you will have a disc based version JB and a digital JB.

This is what you need: https://prosperopatches.com/PPSA01650 > merge and create a PKG. The rest of the info is in my tut.

View attachment 577272

So I downloaded 1.003 version from modded warfare video link copy download0.dat but app not working/staring.

HS2005 · 2026-06-09T20:37:24+0100

yonasz said:
So I downloaded 1.003 version from modded warfare video link copy download0.dat but app not working/staring.

Do you mean patch 01.000.030 or 01.000.003? As Gezine states in his readme:

For firmware 4.03 to 12.40 get YouTube app (PPSA01650) version 01.000.003 PKG
For firmware 12.60 and up get YouTube app (PPSA01650) version 01.000.030 PKG

Asuming you are on FW 12.60 or 12.70 or else this would be pointless for you as you have other options.

yonasz · 2026-06-09T20:41:35+0100

HS2005 said:
Do you mean patch 01.000.030 or 01.000.003? As Gezine states in his readme:

For firmware 4.03 to 12.40 get YouTube app (PPSA01650) version 01.000.003 PKG

For firmware 12.60 and up get YouTube app (PPSA01650) version 01.000.030 PKG

Asuming you are on FW 12.60 or 12.70 or else this would be pointless for you as you have other options.

Now I noticed difference
Thanks
Anyone have link for full pkg?

HS2005 · 2026-06-09T20:50:41+0100

yonasz said:
Now I noticed difference
Thanks
Anyone have link for full pkg?

Just get it via https://prosperopatches.com/PPSA01650 like I did.
Download the 2 files. rename the sc to a higher version and merge using pkg-merge-x64.exe > https://github.com/Tustin/pkg-merge/releases/tag/2.0.1
Think Modded Warfare made a tut about it.

Mahdi72 · 2026-06-09T21:21:51+0100

Hi, i am on 12.70 and i saw that y2jb is ready, but i am confused about elf files and other stuffs. i dont know what should i do!
y2jb auto loader, gezine backup, elfld, shadowmountplus, kstuff, elf arsenal, voidshell,.... can someone explain a little? i am new.

PS5 Hack Status:

Preparing Your Console:

Select Your Jailbreak:

Additional Information:

Warnings:

Archived Information

The destroyer of worlds

Member

Well-Known Member

The destroyer of worlds

Well-Known Member

The destroyer of worlds

Fickly Member

The destroyer of worlds

v0.8-dev-a1b152e​

Changelog:​

Well-Known Member

The destroyer of worlds

Well-Known Member

The destroyer of worlds

New Member

Similar threads

Popular threads in this forum

v0.8-dev-a1b152e

Changelog: