PS5 Exploit Guide

AlphaBravo · Wednesday at 9:59 AM

Blythe93 said:
Coming up next: PS5 13.60 Console Reboot test. Yeah, I don't know why he did that either other than for clickbaiting people into checking it out.

YouTube comments are brutal! Blood in the water and sharks are circling...

Bimmel · Wednesday at 10:21 AM

ViRGE said:
That said, don't forget that M.2 storage is an option here. With the PS4 we needed external storage because that was the only other option. On the PS5 we can put an M.2 drive in the system and have a storage drive that is distinct from the internal storage while still getting full support from the OS to use the accelerated I/O pathways.

That's a very interesting point, I totally forgot about that option.

But when I searched for prices I had to cry.

Axido · Wednesday at 10:22 AM

AlphaBravo said:
YouTube comments are brutal! Blood in the water and sharks are circling...

The most effective way to deal with this is to not post his videos here anymore. Raging in the comments of the video just feeds the YouTube algorithm.

He's just a bad rip-off of Modded Warfare anyway.

Rasa39 · Wednesday at 12:16 PM

flopsy said:
"It must not use a hypervisor exploit or bypass which was disclosed to Sony before being made public or being shown to FULU"

https://bounties.fulu.org/bounties/playstation-5

Thanks, I couldn't remember what it was called.

That last part is interesting though "or being shown to FULU". I wonder if that's the case, kinda hard to know if they would honour that though. especially if they keep it private until after Sony patch it, that doesn't mean someone didn't show it to FULU before that.

Like I wonder what happens if Person A tells FULU, then Person B reports the same exploit to H1, then Person A publicly reveals the exploit because it got patched (even if Person A doesn't know Person B reported the exploit) which mitigates the biggest legal threat from Sony.

Adamos_22 · Wednesday at 12:59 PM

ps5-payload-manager v0.6.0

Changelog

Features & UX Improvements

Repository Browser Overhaul: Rebuilt Get Payloads into a full store experience with a card grid, search, source filtering, and live install status badges.
Payload Details: Added a dedicated details page showing payload README documentation and version info.
Cross-Browser Favorites: Dashboard favorites are now stored on the console, keeping your favorites and custom order synced across all browsers and devices.
Controller & History Navigation: Pressing Back / Circle on your PS5 controller or browser now closes modals, details, and edit modes instead of exiting the browser. Added URL links for direct navigation.
UI Polish & Quality of Life: Refreshed Autoload screen styling with improved auto-saving, redesigned payload launch overlay, support for custom repository payload icons and source badges, and cleaner notification toasts.
New Language:
- Dutch (thanks to JensJ56)
Translations: Updated localization files across all 17 supported languages.

Backend & Bug Fixes

Autoload Network Resilience: Fixed repository network timeouts on boot delaying the autoload sequence (#109, thanks to kianborg).
Fresh PS5 Install Fix: Fixed installer failing on brand new PS5 systems (#108).
Security & Verification: Added checksum verification for repository downloads and restricted actions to POST requests with origin validation.
Stability Improvements: Resolved crashes with large repository catalogs, improved memory handling, fixed connection cleanup, and other minor stability improvements and bug fixes.

Full Changelog: v0.5.2...v0.6.0

source: https://github.com/itsPLK/ps5-payload-manager/releases/tag/v0.6.0

AlphaBravo · Wednesday at 1:12 PM

https://recompstore.com/

A homebrew app store for jailbroken PS5: installs and updates native ports of recompiled games. Bring your own disc.

https://github.com/elripalda/RecompStore/releases

What's new with 1.06

Discover scrolls down through sections, games that are coming soon get a row of their own, and games can ask for your own ROM or data files.

Discover goes down, not sideways. Below the featured banner, the games are a list you scroll down through, with an arrow at the bottom when there's more. Discover is now arranged in sections from the store's website: rows, grids, wide tiles and a still spotlight banner.
Coming soon. Games that aren't out yet get a Coming soon row in Discover, with a date when there is one, and a page of their own.
Latest Updates and Library scroll. Long lists no longer run under the button hints in the corner.
Your own files. A game can now ask for a ROM or data files you own, such as a Nintendo 64 ROM or Quake III's pak files. The store checks them, copies them into the game's folder, and turns a Nintendo 64 ROM in any byte order into the one the game reads.
Keep my saves. For games that say where they keep their saves, Delete now offers Keep my saves: everything else goes, and your saves are still there when you install the game again.

Alphabravo "Not sure if posted here before. Project I recently came across but haven't used yet. Following with interest and plan to check it out. Built with Claude but does seem to have regular updates and seen the store Icon on a growing number of JB ps5."

sharons · Wednesday at 1:31 PM

Since we have the hypervisor exploit isn't is possible to decyrpt any firwmare version? Why can't we decrypt newer firmware? Whats the thing thats stopping us from decrypting new version? is it the e fuses?

schatzi24 · Wednesday at 2:39 PM

kevin corms · Wednesday at 2:40 PM

schatzi24 said:

This is what I did a few days ago, much more stable than webkit.

Bigoroth · Wednesday at 2:55 PM

The only one caveat that I have with Y2JB is that it requires to turn on the HDCP feature, and that's a no-no for most of the capture card setups and I have enough cables by now just to include a splitter to bypass the whole video protection stuff hahaha. Indeed, WebKit still has a lot of failure rates compared to Y2JB, which is almost none, but hey it's doing the job for me.

HS2005 · Wednesday at 2:57 PM

kevin corms said:
This is what I did a few days ago, much more stable than webkit.

As of now I had 0 KP's / issues with using Y2JB. (Hope it stays the same)

I started with: https://github.com/itsPLK/ps5-y2jb-autoloader/releases/tag/v0.9-dev-ae5f2d0
Then: https://github.com/itsPLK/ps5-y2jb-autoloader/releases/tag/v0.9-2b2e5f6
Then: https://github.com/itsPLK/ps5-y2jb-autoloader/releases/tag/v0.9.1-36381e4
Then: https://github.com/itsPLK/ps5-y2jb-autoloader/releases/tag/v1.0.0-dev-8987070
Then: https://github.com/itsPLK/ps5-y2jb-autoloader/releases/tag/v1.0.0-fb17d16
Now: https://github.com/itsPLK/ps5-y2jb-autoloader/releases/tag/v1.0.1-0866fb4

DNS set to: 127.0.0.2. All versions I have used so far with 0 issues.

Post automatically merged: Wednesday at 2:59 PM

kevin corms said:
This is what I did a few days ago, much more stable than webkit.

Indeed. Same here. I still have the webkit as a back-up only.

regex101 · Wednesday at 3:16 PM

ih8god said:
I stopped buying when that stupid additional online check for digital purchases came into play.

Was it possible to download purchased games without signing in PSN before? Or am I reading this wrong?

TheStonedModder · Wednesday at 3:17 PM

Bigoroth said:
The only one caveat that I have with Y2JB is that it requires to turn on the HDCP feature, and that's a no-no for most of the capture card setups and I have enough cables by now just to include a splitter to bypass the whole video protection stuff hahaha. Indeed, WebKit still has a lot of failure rates compared to Y2JB, which is almost none, but hey it's doing the job for me.

What splitter can I get to strip HDCP?

I would much rather use my elgato than this cheap $15 1080p capture card with input lag

Bigoroth · Wednesday at 3:20 PM

TheStonedModder said:
What splitter can I get to strip HDCP?

I would much rather use my elgato than this cheap $15 1080p capture card with input lag

I ended up buying a 5x1 ugreen HDMI Switcher, it has a splitter integrated function, it supports HDR and 4k, so for that model in particular, you get much more stuff if you want to still using a capture card setup.

kevin corms · Wednesday at 3:21 PM

HS2005 said:
As of now I had 0 KP's / issues with using Y2JB. (Hope it stays the same)

I started with: https://github.com/itsPLK/ps5-y2jb-autoloader/releases/tag/v0.9-dev-ae5f2d0
Then: https://github.com/itsPLK/ps5-y2jb-autoloader/releases/tag/v0.9-2b2e5f6
Then: https://github.com/itsPLK/ps5-y2jb-autoloader/releases/tag/v0.9.1-36381e4
Then: https://github.com/itsPLK/ps5-y2jb-autoloader/releases/tag/v1.0.0-dev-8987070
Then: https://github.com/itsPLK/ps5-y2jb-autoloader/releases/tag/v1.0.0-fb17d16
Now: https://github.com/itsPLK/ps5-y2jb-autoloader/releases/tag/v1.0.1-0866fb4

DNS set to: 127.0.0.2. All versions I have used so far with 0 issues.

Post automatically merged: Wednesday at 2:59 PM

Indeed. Same here. I still have the webkit as a back-up only.

I didnt even change my dns, but im connecting to an esp32 board serving the exploit/webkit autoloader and not the net. This gives me a backup option to reload autoloaders and gives relapse an active network connection.

TheStonedModder · Wednesday at 3:23 PM

Bigoroth said:
I ended up buying a 5x1 ugreen HDMI Switcher, it has a splitter integrated function, it supports HDR and 4k, so for that model in particular, you get much more stuff if you want to still using a capture card setup.

And to confirm, it will strip HDCP without issue ?

It’s hard for me to return stuff to Amazon, so I apologize

Bigoroth · Wednesday at 3:25 PM

TheStonedModder said:
And to confirm, it will strip HDCP without issue ?

It’s hard for me to return stuff to Amazon, so I apologize

Yes, confirmed that can strip HDCP. I ended up buying that one, cause I wanted to connect multiple video cables into my elgato capture card as well, without changing most of the ones I use one by one. I have a PS3 and a Vita TV connected to it without anything in between aside from the switcher, so I can confirm that bypasses the HDCP stuff.

EDIT: The only stuff it doesn't support it's VRR.

flopsy · Wednesday at 3:56 PM

Rasa39 said:
Like I wonder what happens if Person A tells FULU, then Person B reports the same exploit to H1, then Person A publicly reveals the exploit because it got patched (even if Person A doesn't know Person B reported the exploit) which mitigates the biggest legal threat from Sony.

Yeah. I hope they have thougt through all logical options. Apparently they dont demand that the solution gets released publicly, which I dont understand. Maybe illegal to say because of DMCA 1201, I guess, but its not a guarantee either way. Whats the point in funding then? The whole point of the foundation/bounty program is to liberate and to fight 1201. I was told I could withdraw my donation, but didnt.

HS2005 · Wednesday at 4:01 PM

Update from blackbearreloaded. See changes below:

ProsperoEden v1.002.000

More free memory for demanding games. The console's memory is one pool shared by the emulated console, the emulator itself and the graphics, and part of it was held without being used. The emulated console's memory, the code caches and a reserve on the system's side now take memory only when they need it. A large open-world game at 2x has about 3.5 GiB free during play instead of 2.2 GiB, at the same frame rate, so a long session runs out of memory far later.
PS5 Pro memory mode. On a PS5 Pro, ProsperoEden asks for the larger memory pool the console offers: 13.5 GiB instead of 12 GiB. A line at launch (memory: in stderr.log) says whether it is active. Contributed by OverkillLabs.
"Ran out of graphics memory" less often above 1x. The part that frees textures no game is using could stop looking before it had freed anything, so graphics memory filled up although much of it could be freed. Contributed by mzet97.
Vibration strength (new setting). Settings > Controls > Vibration strength sets how strong the DualSense vibrates: 25%, 50%, 75% or 100% of what a game asks for. The controller answers each change with a short vibration at the new strength, so the level is chosen by feel.
A game without your language starts in English. With a language chosen that a game does not have, the game started in the next language of the console's own order: with Brazilian Portuguese that was Spanish. It now gets the chosen language or a variant of it when it has one, and English otherwise.
The FPS overlay is a small system monitor. Turned on in Settings > Video > FPS overlay (or in a game's own settings), it shows over the game: the graphics backend, the frame rate against the game's own, the frame time, each of the four emulated CPU cores, the GPU's busy time measured by the GPU itself, the memory taken of the pool and the graphics' part of it, for example VLK 30/60FPS 34.6MS CPU 92% 45% 38% 3% GPU 71% MEM 7.7/12.1G GFX 4.1G. Settings > Video > Overlay options turns each piece on or off, sets its size, position and colours, and with CPU by core off shows only the busiest core; a game's settings can give it its own size and position. Contributed by Bauls Deep.
Variable refresh rate on older system software. On system software 6.02 the console did not know the way ProsperoEden declared a variable refresh rate and listed the app without one. It is now declared the way older system software knows.

Thanks to the people whose work is in this release:

OverkillLabs, for PS5 Pro memory mode, measured on a PS5 Pro.
Bauls Deep, for the FPS overlay's new look as a system monitor, with its options and the settings per game.
mzet97, for finding and fixing why the texture collector stopped freeing graphics memory.
Mihawk, for the measurements of the console's memory pools that the memory work builds on, and for the Vulkan driver all of this runs on.
tonysantosl, for reporting the language that games fell back to, and zh522130, for asking for a vibration that can be turned down.

And to everyone who tests ProsperoEden on their own console and reports what they find.

Link: https://github.com/blackbearreloaded/ProsperoEden/releases/tag/v1.002.000

Post automatically merged: Wednesday at 4:11 PM

PS5CEMU-HAR 4.0.0

From 3.0.0 or later, the app offers this update itself as it starts (Settings > Online checks again). Otherwise extract the ZIP and copy the PPSA99360 folder to /data/homebrew/PPSA99360, replacing the old one. Your settings, saves and games in /data/ps5cemu stay as they are.

Highlights

31 languages: every language the PS5 has. The launcher, Settings and the in-game menus, translated into 30 new languages (nearly 39,000 translated lines), and even your games' names in your language.
Nintendo DS games, on melonDS: a third system beside the Wii U and the 3DS.
Your games on the PS5 home screen: Add to home screen gives any game a tile of its own that starts it straight away.
Wii U mods from a USB drive, with a step-by-step guide.
Eight launcher themes, and the original 2.0 launcher is back as Classic.
Play from your PC or NAS over the network (SMB or NFS).
RetroAchievements for DS games.
Faster Wii U games: Breath of the Wild is back near 60 fps at 1440p, and holds 60 more often at 4K.
Pokémon X, Y, Omega Ruby, Alpha Sapphire, Sun, Moon, Ultra Sun and Ultra Moon look right.

What's new

31 languages

PS5CEMU-HAR now speaks every language the PS5 offers. Every screen, setting, message and in-game menu is translated, all 1,434 lines of it, in each language:

English: UK and US
Europe: German, French, Spanish, Italian, Dutch, Portuguese, Russian, Ukrainian, Polish, Czech, Hungarian, Romanian, Greek, Turkish, Finnish, Swedish, Danish and Norwegian
The Americas: French (Canada), Spanish (Latin America) and Portuguese (Brazil)
Asia: Japanese, Korean, Chinese (Simplified), Chinese (Traditional), Thai, Vietnamese and Indonesian
Middle East: Arabic, laid out right to left

The app follows the PS5's language, or pick one in Settings > Language. Games show their own name in your language where they have one (Wii U and 3DS games in up to twelve languages, DS games in six to eight). Search and the compatibility list still find them by their English name. Arabic is shaped and right to left in the in-game menus too, and Chinese, Japanese, Korean and Thai wrap the way they should.

Nintendo DS (melonDS)

DS games run on melonDS, with its recompiler, as a green side to the right of the 3DS.
No BIOS needed: melonDS's own replacement is built in, and your DS BIOS and firmware dumps are used when they're in melonds/bios.
Screen layouts, borders and scaling filters, save states, and the touch screen on the touchpad or on your phone.
Game information, box art and names for DS games from GameTDB.

Home screen tiles

Add to home screen, in a game's Options menu, makes the game a tile of its own on every side: the tile's picture is the game's box art, and starting it opens the game directly and closes the app afterwards.
Tiles use the open PS5 Forwarder Format, so Forwarder Manager can edit them. ShadowMount Plus puts them on the home screen; they need elfldr running, which the tile uses to start the game.
Works without a HEN: when the app can't write to /data/homebrew itself, a small helper run through elfldr puts the tile there.

Wii U

Mods from a USB drive: put mods in ps5cemu/mods on a USB drive, then use Add mods from USB in a game's Options or Settings > Game files > Mods from USB. Each mod appears on its game's Graphic packs page, off until you turn it on. Mods shared without a rules.txt are handled too. See the mods guide.
Updates and DLC found on your drives: listed by game with what's installed now; install one with a press, or every new one at once. Installs copy four files at a time, and stopping puts back what was there.
Accounts (#39): up to twelve Wii U accounts, each with its own saves, or one for each PS5 user.
AMD FSR 1 as an Upscaling to 4K filter.
Rumble works (#41), on the GamePad and the Pro Controller (#25) alike.
Skylanders Giants starts (#29): players 2 to 4 only get a controller in a game while their DualSense is on, and figures are picked from a list. Skylanders, Disney Infinity and LEGO Dimensions portals no longer crash the app.
Super Smash Bros. for Wii U no longer closes while its shaders compile.

Nintendo 3DS

The Pokémon games are drawn right (#23): no more black dots and lines on the models, broken shadows or wrong colours in Pokémon X, Y, Omega Ruby, Alpha Sapphire, Sun, Moon, Ultra Sun and Ultra Moon. Their 3D runs on the CPU (Hardware shaders off, in Settings > Graphics and in each game's settings).
Outline fix, for other games that show moving black dots on outlined models.
Shaders are compiled the way desktop Azahar compiles them (Async shader compile is off by default, so nothing is drawn half-built).
Games whose shaders run on the CPU no longer stop after a while.
Azahar's latest fixes: Vulkan colour blending, xBRZ, CIA installs, 3GX plugins.
aes_keys.txt with Windows line endings now loads, and a cancelled CIA install puts back what was there.

All systems

Network shares (#43): add SMB or NFS shares in Settings > Game files > Network shares, and play games from your PC or NAS. Each share is a tab in the folder browser.
RetroAchievements for DS games: sign in with Settings > Online > RetroAchievements on the DS side. Unlocks show as PS5 notifications, and the in-game menu lists them.
Remote touch screen (#38): use your phone's browser as the Wii U GamePad's, 3DS's or DS's touch screen by scanning a QR code, from Settings or any game's menu.
Saves: each game's saves and save states on one page, plus Back up to USB and Restore from USB for every system.
Controls (#37): giving a button an input another one uses swaps the two, A and B are one choice, a turbo button, and the touchpad's click can be any Wii U button. Cemu's shader notices can be hidden.

Launcher

Themes: Link Jack (the new default), Classic (the original 2.0 launcher, back with everything added since), Eden (in the style of ProsperoEden), Meyer Oscar and Meyer Oscar Light, Midnight (true black for OLED), and two experiments, Phantom and Terminal. Or make your own in /data/ps5cemu/themes.
Make it yours: the first start sets your language, systems, theme, buttons, music and vibration. After an update the app shows what's new, once.
Pick your systems: show any mix of Wii U, 3DS and DS (Settings > Launcher).
Each system opens on its Library with your last game in focus. The app always opens on the system you used last.
Game settings: any game can have its own graphics, screen, sound and system settings (Options on the game, then Game settings).
Settings shows only the system you're on, as one short list.
Your own music in the launcher (MP3 or WAV), one track or all of them shuffled.
Box art keeps trying when the network is slow to start. Settings > Online can download missing box art, or all of it again.
One keyboard everywhere, with Shift, capitals and symbols.
A new look for the app's tile, home screen background and banner, with all three systems.
A support link in Settings > About.

Performance

Breath of the Wild back near 60 fps at 1440p (3.5.0 ran it at 54–55): Cemu's clock runs on the CPU's own timer again.
Smoother at 4K: the graphics driver submits work on a thread of its own, the clocks come from the CPU's timer, and the emulated CPU cores wait less on each other. In the console test, Breath of the Wild at 4K held 60 fps where it ran 57–59, and its lowest dips while moving rose from 49 to 56 fps. Each change can be switched off in ps5cemu.json.
The shader cache works under a HEN: pipelines are no longer compiled again on every start.
A quicker start: the app goes straight to the launcher (a HEN is only asked when the app needs one), and Cemu's library loads in the background.

Fixes

Starting a game right after opening the app no longer leaves a black screen while the update check waits on the network.
The app starts again on older firmwares and on kstuff + ShadowMount Plus setups (#34), and finds its own folder on more installs (#40).
Downloads work again: box art, the update check, RetroAchievements and the community graphic packs all failed before.
A GPU fault that could freeze the whole console was fixed in the driver.
If the launcher can't start, the notification says why.

Notes

Home screen tiles need elfldr running (it's what starts the game), and ShadowMount Plus to show them on the home screen. To remove a tile, use Remove from home screen in the game's Options menu.
Your ps5cemu.json keeps the settings you changed. The new performance options are on unless your file turns them off.
Load your HEN with PPSA99360 in its app jailbreak list if your setup needs one (setup guide). The Setup check and Settings > Diagnostics show what the app got.
Known issues and what each game does are in the guide and the compatibility list. Report problems with the logs from Settings > Diagnostics > Copy logs to USB.

Thanks

dolphin78 for the remote touch screen idea and prototype (#38), 3lmerx503 for the rumble fix (#41), ProsperoEden for the Eden launcher and performance findings, heydemoura for the PS5 Forwarder Format, and the Cemu, Azahar and melonDS teams.

Link: https://github.com/premohq/PS5CEMU-HAR/releases/tag/v4.0.0
Zip: https://github.com/premohq/PS5CEMU-HAR/blob/releases/PS5CEMU-HAR-v4.0.0.zip

Practicum · Wednesday at 4:20 PM

I've got a problem with Garlic Save Manager. I write down the adress on a webpage but it gives back the 'error' message. I don't know why since I can enter Payload Manager from my computer flawlessly.

I don't know what else to do. Can anybody please help me? Thank you!

PS5 Hack Status:

Preparing Your Console:

Select Your Jailbreak:

Additional Information:

Warnings:

Archived Information

Well-Known Member

Usually on catnip

Maker of TRASLApp

Pervert Deluxe

Well-Known Member

Changelog​

Features & UX Improvements​

Backend & Bug Fixes​

Well-Known Member

What's new with 1.06​

New Member

Well-Known Member

Well-Known Member

Well-Known Member

The destroyer of worlds

Member

Developer

Well-Known Member

Well-Known Member

Developer

Well-Known Member

Well-Known Member

The destroyer of worlds

ProsperoEden v1.002.000​

PS5CEMU-HAR 4.0.0​

Highlights​

What's new​

31 languages​

Nintendo DS (melonDS)​

Home screen tiles​

Wii U​

Nintendo 3DS​

All systems​

Launcher​

Performance​

Fixes​

Notes​

Thanks​

Active Member

Similar threads

Popular threads in this forum

Changelog

Features & UX Improvements

Backend & Bug Fixes

What's new with 1.06

ProsperoEden v1.002.000

PS5CEMU-HAR 4.0.0

Highlights

What's new

31 languages

Nintendo DS (melonDS)

Home screen tiles

Wii U

Nintendo 3DS

All systems

Launcher

Performance

Fixes

Notes

Thanks