PS5 Exploit Guide

ayechief · 2026-10-02T08:26:11+0100

Bigoroth said:
Karo set up a host for Relapse, guarantees more reliable launch, without it freezing halfway through or causing the browser to crash, and without black screens or crashes when loading ELF.

how do you run it tho? Where to begin with all that stuff - i've only tried webkit autoloader which is automated. yet i have no clue where to start with all the different methods like 'hosting your own' and 'sending payloads'

Tomato123 · 2026-10-02T09:03:03+0100

Seems like 14.10 is starting to be rolled out. But some good news from Jordy.

arson-tux · 2026-10-02T09:23:17+0100

After further testing the new jailbreak here are my findings.

1.13.60 fat digital ps5 crashes are so unpredictable.
2.kstuff NG loads but games don't start up
3.Autoloader hangs on kernel base messege
4.When hangs occur the console should be shutdown completely for the jailbreak to load on the next run.
5.Always shutdown never restart to load jailbreak.
6.Payload manager autoload always crashes when loading kstuff. (loading kstuff light manually with each jailbreak is more stable)

HS2005 · 2026-10-02T09:41:16+0100

tglaria said:
I usually try to keep the payloads to a minimum but I want to understand what other people are doing.
What is etaHEN for?

Yes keep payloads to a mininum = less stress on the system in general.

Not going to write an essay about what etaHEN is and does. to be short: It's an AIO Homebrew enabler.
I need it for testing purposes. You can read more here: https://github.com/etaHEN/etaHEN

Post automatically merged: Yesterday at 9:42 AM

Inaki said:
I think you gave us/me bad versions for Y2JB youtube apps... some other sources say .253 for anything 13.40+...
Please, use the 1.009.253 ones for 13.60 also... ~~or wait a bit till we have more info...~~ 13.60 files fail in my 13.60
EDIT: yes, tested 1.009.253 on my fw 13.60 and it works.

Wait, wait, dont't be hasty. I only provide the g00d stuff

Post automatically merged: Yesterday at 9:44 AM

Bigoroth said:
Hahaha, Kstuff NG?

Yes that's for testing purposes ATM.
I have some other payloads that i'm testing on another console. Makes no sense to show it and share it. I only share the "public" payloads. Would not make sense otherwise since not everybody can use them anyway.

Post automatically merged: Yesterday at 9:49 AM

MohammedQ8 said:
what is the best ps5 pkg builder right now?

People have different feelings / opinions / love & hate relations ships with some tools, but you can check these:

https://github.com/Phoenixx1202/PS5-FPKG-Builder
https://github.com/zerodaysofficial/ps5-exfat-pkg-builder-v1/releases/tag/v1.4.5
https://github.com/rdmrocha/fpkg-cli

Post automatically merged: Yesterday at 9:50 AM

kam821 said:
https://github.com/itsPLK/ps5-y2jb-autoloader/releases/tag/v1.0.0-dev-a05c279
https://github.com/edisnord/relapse-y2jb

Huge thanks to edisnord for his work on porting Relapse to Y2JB and najdek for maintaining and expanding the autoloaders.
I've managed to run it 15 times in a row on 11.60 and so far it works like a charm.

Nice. I have 0 need for it. But I'm going to test this in the upcoming dayz.

AlphaBravo · 2026-10-02T09:59:07+0100

HS2005 said:
FYI; I changed my autoload sequence a bit. Since when loading etaHEN the possibility to send .elf files is not possible. Here's my updated autoloader on FW 13.60:

View attachment 593524

These payloads load after clicking on the Webkit Autoloader v0.5.2.
etaHEN needed a bit more time so I have set this to 12 seconds. After etaHEN is loaded I load the elfldr-ps5-1360.elf file to enable sending .elf files again. Which works like a charm after everything is loaded.

Why not just load etahen first as it has it's own kstuff running? You can also change which version it runs. Wouldn't that save having to add Kstuff to the list?

Perhaps you do it for testing purposes but what about average user?

HS2005 · 2026-10-02T09:59:35+0100

Interesting project:

PS5 Vulkan Template

Everything needed to build a PlayStation 5 homebrew powered by Vulkan, in one repository. Titles made from it render through RADV, Mesa's Vulkan driver, which my PS5_Mesa fork builds for the console with a PS5 winsys. RADV is linked into each title by PS5_Vulkan, on the platform layer of my payload SDK fork. On the console it reports Vulkan 1.4 and presents at 3840x2160, at 119.88 Hz when the TV allows it.

A one-stop repo for making your own PS5 homebrew powered by Vulkan 1.4. Point your AI agent at it and it has everything it needs to build a title with you:

Docs: setup, build, deploy and testing on the console
Agent skills: the stack, the console's rules, porting, releases
16 samples proven on PS5: glTF models, PBR, shadows, deferred lighting, bloom, MSAA, compute, mesh shaders, ray queries… all at 4K / 120 fps
A generator: one command makes a new homebrew, ready to build and run
A test suite: runs your homebrew on the console and checks its picture against a PC reference

What you need: a Linux PC and a jailbroken PS5 with a homebrew setup (etaHEN, ftpsrv, klogsrv). ps5/tools/bootstrap.sh sets up the rest.

Link: https://github.com/mihawk-99/PS5_VulkanTemplate

Post automatically merged: Yesterday at 10:02 AM

AlphaBravo said:
Why not just load etahen first as it has it's own stuff running? You can also change which version it runs. Wouldn't that save having to add Kstuff to the list?

Perhaps you do it for testing purposes but what about average user?

To be short: it conflicts. System crashing, some binaries and ofssets (on the background) not loading etc.
I do this for testing purposes (fpkg-related), but users can use the kstuff 1.11 lite version or Drakmor's version. So kstuff-1.13-fpkg-dr-test5.elf I also targeted etaHEN to use the Ng kstuff in my case via config.

For 95% of the users this is enough to load:

Next to using a cheat engine like Cheatrunner. https://github.com/notmaj0r/CheatRunner/releases/tag/v0.17.2 or other variant.

Post automatically merged: Yesterday at 10:18 AM

Another video from Modded:.
Setup the New PS5 Relapse Jailbreak which can now be fully installed on the console itself and work offline with the autoloader!

Inaki · 2026-10-02T10:52:16+0100

HS2005 said:
Yes keep payloads to a mininum = less stress on the system in general.

Not going to write an essay about what etaHEN is and does. to be short: It's an AIO Homebrew enabler.
I need it for testing purposes. You can read more here: https://github.com/etaHEN/etaHEN

Post automatically merged: Yesterday at 9:42 AM

Wait, wait, dont't be hasty. I only provide the g00d stuff

View attachment 593575

Post automatically merged: Yesterday at 9:44 AM

Yes that's for testing purposes ATM.
I have some other payloads that i'm testing on another console. Makes no sense to show it and share it. I only share the "public" payloads. Would not make sense otherwise since not everybody can use them anyway.

Post automatically merged: Yesterday at 9:49 AM

People have different feelings / opinions / love & hate relations ships with some tools, but you can check these:

https://github.com/Phoenixx1202/PS5-FPKG-Builder
https://github.com/zerodaysofficial/ps5-exfat-pkg-builder-v1/releases/tag/v1.4.5
https://github.com/rdmrocha/fpkg-cli

Post automatically merged: Yesterday at 9:50 AM
l

Nice. I have 0 need for it. But I'm going to test this in the upcoming dayz.

haha, yes, forgive my language, that sounds a bit overdramatic on my side ;( I apologize.

AlphaBravo · 2026-10-02T10:54:07+0100

Tomato123 said:
Seems like 14.10 is starting to be rolled out. But some good news from Jordy.

It's good and bad news. So long as HV remains unpatched in latest fw (ref Ark Sama), the longer it will take to see Fpkg working on 12.xx and 13.xx systems. I hope HV doesn't get patched for a long time. Benefits out way some of the short term limitations...

HS2005 · 2026-10-02T10:55:47+0100

Inaki said:
haha, yes, forgive my language, that sounds a bit overdramatic on my side ;( I apologize.

No sweat. It's all about trial and error and testing in the end. We'll get there.

Tomato123 · 2026-10-02T11:38:48+0100

AlphaBravo said:
It's good and bad news. So long as HV remains unpatched in latest fw (ref Ark Sama), the longer it will take to see Fpkg working on 12.xx and 13.xx systems. I hope HV doesn't get patched for a long time. Benefits out way some of the short term limitations...

The benefits of it remaining unpatched for longer outweigh the downsides imo. Granted, I waited from release until now to actually do anything with my PS5 so I just have the mindset of "already waited this long, can wait a little longer".

HS2005 · 2026-10-02T11:46:51+0100

Big update of ProsperoEden.

ProsperoEden is an unofficial PlayStation 5 port of Eden - an accurate, high-performance emulator. All credit for the emulator core belongs to the Eden project and its contributors. ProsperoEden is not affiliated with or endorsed by the Eden team or Sony.

This is an early alpha. Video, audio, controller input, and saves have been confirmed working. Compatibility and performance will vary between games.

ProsperoEden v1.000.040

The launcher in your language. It follows the language the PS5 is set to, in 29 languages. Arabic, Chinese, Greek, Japanese, Korean and Thai are drawn with the console's own fonts. Text that runs longer in another language makes its own room instead of being cut.
Accessibility. Settings > Accessibility adds Larger text, High contrast and Reduce motion. Warnings carry a mark as well as a colour.
Save data in and out. Import a game's save from a folder or from a Ryujinx data folder, and export a copy. See "Moving save data" in the README inside the ZIP.
A ten-second slowdown with the AMD FSR filter is fixed. In a large open-world game, gameplay could start at 3-9 FPS for about ten seconds, and frames of about a tenth of a second kept coming afterwards. The texture cache was throwing away images the GPU had drawn, with a wait for the GPU each time, as soon as memory use passed a mark that the FSR filter's own images pushed it over. It now keeps them until graphics memory is really short.
Smoother heavy scenes. The renderer hands its work to the Vulkan worker in larger batches, and the emulated cores wait less on the GPU caches' locks. In the heaviest area of a test walk this removed drops to 26-28 FPS and cut the GPU thread's work by about a quarter.
Touchpad as Select in games. A tap of the touchpad presses the game's Select (Minus) button, and a longer press holds it. The Select + L1 and Select + R1 shortcuts never reach the game as a press.
A crash a few seconds into some games is fixed. The motion sensors' updates could reach a part of the controller service that was not set up yet.
Games' own system screens. A game's error dialog, profile picker and similar screens use Eden's built-in versions, and its error dialog now answers the game instead of leaving it waiting. The firmware's versions could end a session with an out-of-memory error.
More graphics memory. The PS5 gives an app one pool of memory that the CPU and the GPU share, and ProsperoEden held about 3 GiB of it without using it: its heap took 3 GiB at start and the emulated console's page table 1 GiB. Both now take memory as they need it, which gives graphics about 2.6 GiB more in the largest game tested. That game ran out of graphics memory while loading at 2x; it now runs at 2x with the AMD FSR filter at a steady 30 FPS, with about 2 GiB to spare. The texture cache also measures its memory use from what is really left of the pool, instead of a driver figure that counted every allocation twice.
A clearer message when a game runs out of graphics memory. If a game still needs more than there is at a high resolution, give it its own lower one: Triangle on it in the Library, then Resolution.
Games that accept only single Joy-Cons now get one, and L1 and R1 are its SL and SR buttons, which those games ask for on their controller screen.
Mods. A game's patches, replacement files and cheats load from mods/<title ID>/ next to roms/, and the game's settings list them with a switch each. .ips and text .pchtxt patches, which the emulator core could not apply, now work. The Library has one switch per game for all of its mods. See "Mods" in the README inside the ZIP.
120 Hz output. Refresh rate in Settings > Video, and in each game's settings, asks the display for 120 Hz while a game runs. A display that cannot show it stays at 60 Hz, and the menu always runs at 60 Hz. After a game at 120 Hz the menu takes about five seconds to come back while the display changes rate.
Output resolution. Settings > Video has a new Output resolution row: 1080p (as before), 1440p or 2160p. It is the size of the picture ProsperoEden puts out, for the menu and for games. Until now a game's picture was made at 1080p and enlarged, whatever its internal resolution; at 2160p the upscaling filter scales the game straight to a 4K picture. A larger picture needs more graphics memory.
3x and 4x resolution. The internal resolution now goes up to 4x. These need far more graphics memory than 2x; a game that runs out says so, and can be given its own lower resolution.
Patches for more frames than the display shows. A game patched to run faster than the output refreshes keeps its pace: the frames the display has no refresh for are left out.
Crash reports. If ProsperoEden stops because of an error, it writes crash-<date>-<time>.txt to /data/prosperoeden/logs, starts again and says on the home screen where the report is. That session's logs are kept beside it, and the five newest reports stay. A report holds what failed, where in the app's code, and what was running; it never holds the contents of memory.
The launcher and the OpenGL renderer use the PS5 OpenGL 4.6 SDK 1.0.0.
The graphics driver's shader cache moved to /data/prosperoeden/cache, so a read-only package install keeps it.
Experimental: block list. With an empty file named block-list.txt in /data/homebrew/PPSA99008, ProsperoEden saves which code a 64-bit game compiled and compiles it again on a spare CPU when the game next starts. In a repeat session of a large open-world game, the emulated cores then compiled 426 blocks during play instead of 138,262, and gameplay started at 30 FPS instead of 22. It is off by default until more games have run with it.

Link: https://github.com/blackbearreloaded/ProsperoEden/releases/tag/v1.000.040

Post automatically merged: Yesterday at 11:56 AM

Update 26.06-14.10.00 came out yesterday. This update did not patch the HV.

Bigoroth · 2026-10-02T12:16:38+0100

Adamos_22 said:
CheatRunner v0.17.2

notmaj0r released this 11 hours ago
v0.17.2
59dcb9e
CheatRunner v0.17.2

See the full changelog here: Changelog

v0.17.2

Fixed: writes on FW 13.60.

Check GUIDE to setup CheatRunner.zip on Homebrew Launcher.

Before updating to a new CheatRunner version, please follow these steps: Updating CheatRunner

Special Thanks:

Supporters - those who supported the project through Ko-Fi or Buy Me a Coffee.
• primo • lal3x • jawad • anonymous • Maffioh • X-F1REBALL-X • Br0ken4life

Testers - those who tested early builds of CheatRunner before release.

source: https://github.com/notmaj0r/CheatRunner/releases/tag/v0.17.2

https://fxtwitter.com/callmemaj0r/status/2105835008413843563?s=20

Rasa39 · 2026-10-02T12:26:32+0100

Tomato123 said:
Seems like 14.10 is starting to be rolled out. But some good news from Jordy.

So why all the drama if that's the case? Doesn't that mean it wasn't patched on 14.00 either even though the whole thing was about burning the last remaining exploit, meaning no more dumps or anything past 13.60?

I know it's not as simple as the bug existing=exploit, but still, if games like lua work, and there's a hv bug, then it's not "unhackable" after 13.60 right?

thekarter104 · 2026-10-02T12:37:01+0100

Since you need to install disc based games, is it possible to bypass the disc license check so you can play without the disc?

When you start a game without the disc or still with another game disc inside, it will say the data is corrupted. (if no jailbreak is loaded, it will literally say insert the disc.)

Would be cool to bypass disc license check.

Post automatically merged: Yesterday at 12:47 PM

zebrone said:
Is not compiled or im mistake?

Post automatically merged: Thursday at 7:53 PM

If i i try to install on an m2 that contains exfat games,it will erase them before installing?

Does it support retro achievements or am I not looking in the right place? Can't find it.

Rasa39 · 2026-10-02T12:53:47+0100

thekarter104 said:
Since you need to install disc based games, is it possible to bypass the disc license check so you can play without the disc?

When you start a game without the disc or still with another game disc inside, it will say the data is corrupted. (if no jailbreak is loaded, it will literally say insert the disc.)

Would be cool to bypass disc license check.

I tried this a bunch of times on ps4, there's some sort of additional check I think. Probably that it needs to read the wobble from the disc directly.

On ps4 I would pull the license file and pkg from the disc, install them both, but still nothing.

To be clear I never tried on ps5, like you said with jb I got that same error with legit games that required higher fw version. Whereas on base fw it told me to install the update file. So there's something else going on with the jailbreak that bypasses those checks at least.

I still would suspect it won't work though, given that it never need on ps4. I also think it treats the game as digital once installed, even though it's a disc pkg file which is a different CUSA/PPSA from the digital version.

Maybe if someone can fake mount the disc partition, almost like a ps5 equivalent to iso loading, from an external or m.2 drive. That might work, but if it's intentionally looking for the wobble regardless then probably not, since the consoles knows if a pkg is the digital version, or the disc version.

Schweino · 2026-10-02T13:05:12+0100

AlphaBravo said:
It's good and bad news. So long as HV remains unpatched in latest fw (ref Ark Sama), the longer it will take to see Fpkg working on 12.xx and 13.xx systems. I hope HV doesn't get patched for a long time. Benefits out way some of the short term limitations...

Isn't FPKG related to the A53 exploit and not the HV exploit? If so, the question is if the A53 expoit is patched in 14.10.

ViRGE · 2026-10-02T13:20:20+0100

Sourenics said:
Hi! I'm new to this, and I'm running into a couple of issues.

The first one, and the one that worries me the most, is cooling/temperature. I'm using the WebKit autoloader, and then I just autorun kstuff and ShadowMountPlus. Backups run fine from an external NVMe SSD, but I noticed that the back of my PS5 gets quite hot after playing. I only played for about 30–40 minutes to test it, but it felt pretty hot. The SSD was also hot, although I assume that's normal.

Is this normal for the PS5 when using a jailbreak, or could I have done something wrong? I don't want to risk overheating the console.

Jailbreaking does not change the console's thermal management policies. Sony runs the PS5 hot for efficiency reasons (the hotter the temperature differential, the more heat you can move with a given volume of air). This allows them to keep the fan running at a lower speed, and thus less noise.

Now there are utilities that can change the fan policy, and Shadowmountplus is one of them. But it is not enabled by default.

The second issue is with ShadowMountPlus. I edited the config.ini file and removed the # from kstuff_game_auto_toggle=1 so that the option is enabled. However, I don't get the "kstuff paused" notification when launching a game, even with silent mode disabled.

I've been searching around, but most of what I've found are older posts and payloads. I also tried asking on X, but didn't get any replies.

kstuff toggling is an outdated feature. The modern kstuff does not have the performance penalty that earlier versions carried.

kevin corms · 2026-10-02T14:33:49+0100

Is it expected that some ps4 fpkg files will fail to install on 13.6 using kstuff lite?

HS2005 · 2026-10-02T14:39:11+0100

kevin corms said:
Is it expected that some ps4 fpkg files will fail to install on 13.6 using kstuff lite?

Why would you assume this would be the case?

Inaki · 2026-10-02T14:40:02+0100

kevin corms said:
Is it expected that some ps4 fpkg files will fail to install on 13.6 using kstuff lite?

It is expected that any FPKG will fail to run ( it should install ) on fw 13.60, no matter what kstuff you use, so why install ?

PS5 Hack Status:

Preparing Your Console:

Select Your Jailbreak:

Additional Information:

Warnings:

Archived Information

Member

Well-Known Member

Member

The destroyer of worlds

Well-Known Member

The destroyer of worlds

PS5 Vulkan Template​

Well-Known Member

Well-Known Member

The destroyer of worlds

Well-Known Member

The destroyer of worlds

ProsperoEden v1.000.040​

Active Member

v0.17.2​

Pervert Deluxe

Well-Known Member

Pervert Deluxe

Well-Known Member

Well-Known Member

Well-Known Member

The destroyer of worlds

Well-Known Member

Similar threads

Popular threads in this forum

PS5 Vulkan Template

ProsperoEden v1.000.040

v0.17.2