PS5 Exploit Guide

mrcico · 2026-09-23T23:36:40+0100

hsaitou said:

If someone need Gezine's Y2JB latest backup files here it's. https://gofile.io/d/OgcI7d8U

peteruk · 2026-09-24T08:05:08+0100

Adamos_22 · 2026-09-24T08:25:03+0100

peteruk · 2026-09-24T09:19:15+0100

Adamos_22 said:
View attachment 592255

So in theory if we're just running fpkg (no mountable game images) we could get away with just running this one payload (now that a53 is incorporated) and do without shadowmount too
It's still quite early in the day and I'm not fully awake, am i missing something ?

Edit... can't remember if his version of Kstuff supports backports or if that's what we need sm+ for... would be pretty great to have the one unified payload in my humblest of opinions

HS2005 · 2026-09-24T09:32:23+0100

peteruk said:
So in theory if we're just running fpkg (no mountable game images) we could get away with just running this one payload (now that a53 is incorporated) and do without shadowmount too
It's still quite early in the day and I'm not fully awake, am i missing something ?

Edit... can't remember if his version of Kstuff supports backports or if that's what we need sm+ for... would be pretty great to have the one unified payload in my humblest of opinions

Indeed.

Previous situation.
1. Load PPR A53 patch
2. Load kstuff

Current situation.
1. Load kstuff, because the PPR patch for A53 is integrated.

SM+ is needed for mounting games such as .ffpkg, .exfat, .ffpfs, .ffpfsc and pfs container related formats.

peteruk · 2026-09-24T09:39:38+0100

HS2005 said:
Indeed.

Previous situation.
1. Load PPR A53 patch
2. Load kstuff

Current situation.
1. Load kstuff, because the PPR patch for A53 in integrated.

SM+ is only needed for mounting games such as .ffpkg, .exfat, .ffpfs, .ffpfsc, pfs container related

Thanks! I sometimes find it hard to focus and think clearly (mainly because of the daily medications) so I appreciate you helping me to see clearly

It's a great time, whilst some of the AIO payload's we were seeing from some AI assisted dev's were ridiculously bloated I believe this kind of unified payload from a very talented individual is the way forward... Less is more imho

ViRGE · 2026-09-24T09:48:05+0100

MrWhistler said:
SM+ is only needed for mounting games such as .ffpkg, .exfat, .ffpfs, .ffpfsc and pfs container related formats.

It can also be used to load external backport files over an fPKG if you ever want to swap those out or otherwise mess with them without repacking the whole dang package. But that is a going to become an increasingly niche use case for end-users as the library of available fPKGs grows.

HS2005 · 2026-09-24T09:51:27+0100

peteruk said:
Thanks! I sometimes find it hard to focus and think clearly (mainly because of the daily medications) so I appreciate you helping me to see clearly

It's a great time, whilst some of the AIO payload's we were seeing from some AI assisted dev's were ridiculously bloated I believe this kind of unified payload from a very talented individual is the way forward... Less is more imho

Well besides any medication PS5 developments are in a rapid-pace.
When I open my discord on a daily basis I have over 200+ new messages and like 30 new+ DM's.

The rule of thumbs is the less payloads the less stress on the system. .elf files can be merged, when merged properly, due to many firmwares and all of their different nature / behaviour. This was also a pre developement: https://github.com/Soonniicc/kstuff-a53 (now offline) not needed anymore.

Anyway we will see what is (still) needed once 13.60 arrives.

Post automatically merged: Today at 9:53 AM

ViRGE said:
It can also be used to load external backport files if you ever want to swap those out or otherwise mess with them without repacking the whole dang fPKG. But that is a going to become an increasingly niche use case for end-users as the library of available fPKGs grows.

Yes that why I wrote and pfs container related formats because SM+ also reads and makes use of fakelib and fakelib2. Asumming you wanted to point that out.

EDIT: In addition. The M2 fix is big because a lot of people (like I) make use of a internal M2 slot.

Rasa39 · 2026-09-24T12:41:28+0100

Anyone got zeco's fw spoof working? I had it working no problem before, but now it never shows any debug popup and freezes me out of any other homebrew without changing the fw string. my console is still on the same fw too,

HS2005 · 2026-09-24T12:55:37+0100

Rasa39 said:
Anyone got zeco's fw spoof working? I had it working no problem before, but now it never shows any debug popup and freezes me out of any other homebrew without changing the fw string. my console is still on the same fw too,

Nevere tried it because no need. You can check this if you want: https://github.com/illusionyy/ps5-fw-spoof/releases

Post automatically merged: Today at 1:31 PM

Additional update regarding elf-arsenal

v1.6.23

soniciso released this yesterday

Firmware coverage, a PKG installer that takes links, and a download queue that
stops hiding what it is doing.

Install from a link. Paste URLs one per line, or give it the address of a
page that lists them — an archive.org item, an open directory index, anything
that is just anchors — and the console reads that page and hands back the .pkg
links to pick from. Doing the fetch on the console also sidesteps the CORS
refusals a browser would hit. Links go on a queue with a single worker, since
installs serialise down there anyway; it reports per-item state and refuses
duplicates that are still pending.

Every payload is rebuilt against the current SDK, so all of them now carry the
full 3.00–13.60 dispatch. zftpd was the one that mattered: it stopped at 10.60
and was reachable from the FTP daemon switch. The firmware check that catches
this now also runs on the argv spawn path, which was skipping it.

The ShellCore PPR patch gains tables for 6.50 and 10.60, taking it to 50
of 51 firmwares — only 9.05 is missing, and no image for it exists to derive one
from. Both new tables were carried over from neighbouring firmwares rather than
read off a console; tools/verify-firmware-tables.py checks every table against
a real firmware image and all 51 pass, 561 sites, nothing failing. The same tool
verifies kmonitor's kernel offsets against decrypted kernels — 51 of 52.

The patcher now looks before it writes. Each entry replaces a specific
instruction, and nothing checked that the instruction was there; an offset that
did not describe the running build was written anyway. Anything unexpected is
skipped now, which is also what makes a derived table safe to ship.

Link: https://git.etawen.dev/soniciso/elf-arsenal/releases/tag/v1.6.23

littlemisskittn · 2026-09-24T13:35:46+0100

Still want one of these vibe coding devs to explain why we can’t get FPKG on 12.xx. A real dev would’ve explained it by now. But I guess since their Patreon donations aren’t where they’d like them to be, they won’t.

So allow me.

Apparently the reason why we don’t have it yet for 12.xx is because Sony patched the A53 in those firmwares. So whatever “exploit” they have, it’s unfortunately required to run FPKG on anything over 12.xx. The 11.60 fix was just to update some things that 11.40 changed but the “hole” was still there.

Still, I want to hear it out of the mouth of one of these devs to either confirm I’m right or to prove me wrong.

Tired of all this grandstanding and drama and shit. Takes a few minutes to explain things. But they’re too busy fighting and trolling each other to do it.

To quote CM Punk “I’m old, I’m tired, and I work with fucking children”. I’d be laughing if it wasn’t so true.

I gave it a few days to see if they could muster up the answer, now I am.

So if you’re on 12.xx firmware, you’ll have to wait for the new 13.60 exploit before you get FPKG support.

TheStonedModder · 2026-09-24T13:46:01+0100

littlemisskittn said:
Still want one of these vibe coding devs to explain why we can’t get FPKG on 12.xx. A real dev would’ve explained it by now. But I guess since their Patreon donations aren’t where they’d like them to be, they won’t.

So allow me.

Apparently the reason why we don’t have it yet for 12.xx is because Sony patched the A53 in those firmwares. So whatever “exploit” they have, it’s unfortunately required to run FPKG on anything over 12.xx. The 11.60 fix was just to update some things that 11.40 changed but the “hole” was still there.

Still, I want to hear it out of the mouth of one of these devs to either confirm I’m right or to prove me wrong.

Tired of all this grandstanding and drama and shit. Takes a few minutes to explain things. But they’re too busy fighting and trolling each other to do it.

To quote CM Punk “I’m old, I’m tired, and I work with fucking children”. I’d be laughing if it wasn’t so true.

I gave it a few days to see if they could muster up the answer, now I am.

So if you’re on 12.xx firmware, you’ll have to wait for the new 13.60 exploit before you get FPKG support.

I think you over estimate greatly how many people have researched a53, let alone fpkg research it’s not an easy nut to crack there’s only a handful of people I know, ark included who would be far enough to elaborate

None of which have accounts here either.

I dumped a53 but never looked into the piracy side of things. So the only 12.x deterrent I know of is that 1 hour p2jb thing everytime you reboot

And touching a53 you will reboot. A LOT. If you even breath wrong it will kernel panic. Which makes research a bitch so maybe it’s not patched but actually not researched. Ark Sama has said half truths before

Rasa39 · 2026-09-24T14:14:28+0100

Anyone using onionhen, do you always get the onionhen shortcut in the top right of the xmb like in modded warfares video?
I'm on 6.02 and it seems any payload that tries to put a shortcut up there, fails to do so.

Adam512 · 2026-09-24T14:20:40+0100

littlemisskittn said:
Still, I want to hear it out of the mouth of one of these devs to either confirm I’m right or to prove me wrong.

Tired of all this grandstanding and drama and shit. Takes a few minutes to explain things. But they’re too busy fighting and trolling each other to do it.

To quote CM Punk “I’m old, I’m tired, and I work with fucking children”. I’d be laughing if it wasn’t so true.

I gave it a few days to see if they could muster up the answer, now I am.

So if you’re on 12.xx firmware, you’ll have to wait for the new 13.60 exploit before you get FPKG support.

I apologize in advance for being blunt.

No developer is obligated to prove anything to you, let alone go to the trouble of explaining things... In my opinion, they simply want to polish a few things before the official launch of version 12/13.xx.

In any case, I’ll reiterate that developers are under no obligation to release information or provide explanations. Sometimes explaining things is a real hassle

They aren't obliged to release anything, and what they do release doesn't have to come with an explanation; anyone who wants to use it can, and anyone who doesn't is free to go wherever they like. You aren't obliged to explain everything in your life to me either.

AlphaBravo · 2026-09-24T14:34:56+0100

littlemisskittn said:
Still want one of these vibe coding devs to explain why we can’t get FPKG on 12.xx. A real dev would’ve explained it by now. But I guess since their Patreon donations aren’t where they’d like them to be, they won’t.

So allow me.

Apparently the reason why we don’t have it yet for 12.xx is because Sony patched the A53 in those firmwares. So whatever “exploit” they have, it’s unfortunately required to run FPKG on anything over 12.xx. The 11.60 fix was just to update some things that 11.40 changed but the “hole” was still there.

Still, I want to hear it out of the mouth of one of these devs to either confirm I’m right or to prove me wrong.

Tired of all this grandstanding and drama and shit. Takes a few minutes to explain things. But they’re too busy fighting and trolling each other to do it.

To quote CM Punk “I’m old, I’m tired, and I work with fucking children”. I’d be laughing if it wasn’t so true.

I gave it a few days to see if they could muster up the answer, now I am.

So if you’re on 12.xx firmware, you’ll have to wait for the new 13.60 exploit before you get FPKG support.

I think you should take your concerns to Oprah, then Judge Judy and finally International Court of Justice. Truth is out there....

Dude, I was on 5.xx waiting a year to get anything from the scene. And now I'm on 6.02 with no WebKit and still having to use porn simulator as a userland.

I wish I had your problems

Bigoroth · 2026-09-24T14:40:18+0100

Adam512 said:
I apologize in advance for being blunt.

No developer is obligated to prove anything to you, let alone go to the trouble of explaining things... In my opinion, they simply want to polish a few things before the official launch of version 12/13.xx.

In any case, I’ll reiterate that developers are under no obligation to release information or provide explanations. Sometimes explaining things is a real hassle

They aren't obliged to release anything, and what they do release doesn't have to come with an explanation; anyone who wants to use it can, and anyone who doesn't is free to go wherever they like. You aren't obliged to explain everything in your life to me either.

Let's say the devs reply to this person in the same way, but even then, I don't think their answer would satisfy them. Imagine if they told them that it’s simply because they don’t want to, as Stoned said above, or because the a53 is a tricky component and there’s really only progress in 11.60 and 13.xx because until the jailbreak comes out, there isn’t much that can be done. But anyway, according to them, they’re hiding something from everyone on 12.xx and will leave them out.

littlemisskittn · 2026-09-24T14:51:40+0100

Adam512 said:
I apologize in advance for being blunt.

No developer is obligated to prove anything to you, let alone go to the trouble of explaining things... In my opinion, they simply want to polish a few things before the official launch of version 12/13.xx.

In any case, I’ll reiterate that developers are under no obligation to release information or provide explanations. Sometimes explaining things is a real hassle

They aren't obliged to release anything, and what they do release doesn't have to come with an explanation; anyone who wants to use it can, and anyone who doesn't is free to go wherever they like. You aren't obliged to explain everything in your life to me either.

It’s only a “hassle” if they’re just telling Claude how to code and don’t truly understand how things work or what they’re doing. A real dev does and can explain. We see it in the MiSTer community all the time. Devs breaking down how things work and why. Hell, even with systems previous to this when we had actual devs in the scene and not a bunch of vibe coding bounty hunters, we always seen explanations and videos of how things worked and how they got there.

I know kissing ass is the norm here and you people want to normalize this kind of thing, but I’m not doing it.

You wonder WHY legit devs are leaving this scene? Because it’s full of toxic vibe coders who just type a few things into Claude and use their social media pages to gain clout and attention. I been in various scenes since the Dreamcast era and I’ve never seen a scene as toxic and inexcusable as this one.

Both these vibe coders and the people that worship them. I respect people who actually put in the work. I can tell a vibe coder apart from a legit programmer and congratulations.

You failed.

Post automatically merged: 17 minutes ago

Bigoroth said:
But anyway, according to them, they’re hiding something from everyone on 12.xx and will leave them out.

That’s not what I said.

I explained why it’s not possible since none of these supposed “devs” can explain why it’s not possible yet. I gave them a chance to explain, they didn’t. So I did.

I knew the answer, I was waiting for them to explain it.

Bigoroth · 2026-09-24T14:56:50+0100

littlemisskittn said:
It’s only a “hassle” if they’re just telling Claude how to code and don’t truly understand how things work or what they’re doing. A real dev does and can explain. We see it in the MiSTer community all the time. Devs breaking down how things work and why. Hell, even with systems previous to this when we had actual devs in the scene and not a bunch of vibe coding bounty hunters, we always seen explanations and videos of how things worked and how they got there.

I know kissing ass is the norm here and you people want to normalize this kind of thing, but I’m not doing it.

You wonder WHY legit devs are leaving this scene? Because it’s full of toxic vibe coders who just type a few things into Claude and use their social media pages to gain clout and attention. I been in various scenes since the Dreamcast era and I’ve never seen a scene as toxic and inexcusable as this one.

Both these vibe coders and the people that worship them. I respect people who actually put in the work. I can tell a vibe coder apart from a legit programmer and congratulations.

You failed.

Whether it's with “Claude” or without assistance, any developer in the scene would tell you the same thing in response to your insistence and assumptions. No one here is sucking up to them, Sony, or AI. Whichever side you take, at the end of the day, you’re getting the jailbreak without making any personal contribution other than disconnecting the console from the internet, so, well, it’s up to you.

littlemisskittn · 2026-09-24T14:59:14+0100

Bigoroth said:
Whether it's with “Claude” or without assistance, any developer in the scene would tell you the same thing in response to your insistence and assumptions. No one here is sucking up to them, Sony, or AI. Whichever side you take, at the end of the day, you’re getting the jailbreak without making any personal contribution other than disconnecting the console from the internet, so, well, it’s up to you.

Keep telling yourself that, level 1. You ALMOST got to my point but had to white knight your way out of it…..

Post automatically merged: 2 minutes ago

And let me spell it out so maybe you can understand better:

I’m not arguing about being entitled to a free jailbreak. Instead, I’m arguing for transparency and basic respect for the craft of programming, which is completely flying over your heads.

You’re mad because I held up a mirror to the exact toxic, clout-chasing culture that has taken over the scene. I proved that y’all care more about sucking up to "vibe coders" than actually understanding the hardware they are trying to hack.

I jailbreak my shit for three reasons: to protect the digital stuff I buy and have more control over and to understand how things operate.

I’m not one of those “FREE WAREZ” motherfuckers.

I am however one that wants explanations for people that might NOT understand so we don’t get hundreds of “etaWEN” comments.

PS5 Hack Status:

Preparing Your Console:

Select Your Jailbreak:

Additional Information:

Warnings:

Archived Information

Well-Known Member

Member

DMT hyperspace

Well-Known Member

Attachments

DMT hyperspace

The destroyer of worlds

DMT hyperspace

Well-Known Member

The destroyer of worlds

Pervert Deluxe

The destroyer of worlds

v1.6.23​

NO GODS. NO KINGS. ONLY MAN.

Developer

Pervert Deluxe

Well-Known Member

Well-Known Member

Member

NO GODS. NO KINGS. ONLY MAN.

Member

NO GODS. NO KINGS. ONLY MAN.

Similar threads

Popular threads in this forum

v1.6.23