PS5 Exploit Guide

HS2005 · Wednesday at 4:23 PM

For these who like themes:

ps5-theme 1.60

Custom home-screen themes for jailbroken PS5 consoles on firmware 13.60 and below. Runs as an etaHEN plugin or on its own from any ELF loader. Tested on firmware 13.42, both with etaHEN 2.5B (unified build) and from PS5 Payload Manager.

Which file?

ps5-theme.plugin: for etaHEN. Copy it to /data/etaHEN/plugins/ and turn on auto-start.
ps5-theme.elf: the same program for PS5 Payload Manager or any ELF loader (port 9021). No etaHEN needed.
ps5-theme-stop.elf: only for when the manager can't be reached. Start it from Payload Manager or a payload loader, then start ps5-theme again. It stops the plugin and leaves your theme on the screen. Put it in a folder of its own under /data/pldmgr/payloads/.

Updating

From 1.23 or later: copy the new file over the old one (or put it in /data/ps5-theme/update/). Within about 10 seconds the running plugin finds it and hands over, keeping your theme on the screen. No restart needed.
From 1.22 or older: copy the new file and restart the console once.
If you keep a copy in PS5 Payload Manager, replace that one too, so an old version isn't started from there.

New in 1.60 (since 1.59)

One progress display while a theme is applied. On the library, the banner shows the apply's progress, with its percentage on the right; the message in the corner no longer covers it. On the other pages the message shows as before.
Docs: a photo of the colours from Edit colours on the console, in the Appearance themes guide.

Everything in 1.59 is included.

Checked

54 end-to-end tests on the host (full and emulated), and a PS5 with 13.42: an apply with the library open, and the update from 1.59 handing over by itself.

Link: https://github.com/Blaze414/ps5-theme/releases/tag/v1.60

Post automatically merged: Wednesday at 4:24 PM

Experimental Y2JB + Byepervisor manual-mode release for PS5 13.60

Y2JB 13.60 Manual Mode (Experimental)

Experimental PS5 firmware 13.60 image combining Y2JB/Relapse with the Byepervisor Rest Mode stage. A matching AP-complete receipt and restored hook state were confirmed on one console.

This build does not automatically launch Payload Manager or other payloads after wake.

Install and run

Use YouTube v01.009.253 (PPSA01651 or PPSA01652). Back up its existing download0.dat.
Extract download0.dat from the attached ZIP and copy it to /user/download/<TITLE_ID>/download0.dat.
Launch YouTube. After the Byepervisor arm notice, let the console enter Rest Mode.
Wait for steady amber, leave it there for about one minute, then wake the console.
Send further payloads through elfldr on port 9021 or launch them from the Relapse page.

download0.dat SHA-256:
ff1ec8eea341fc282416ba07047e51a6d0e074019c8ef10bf6b4ccea777725c0

The attached ZIP SHA-256:
3118ba2edbb05dc914fc8b0e56b3d92d95d30c206990cb7a0864ee60101606d9

Working kstuff and fPKG support have not been demonstrated. See the README and POSTWAKE_GATE_1360.md for the tested scope.

Link: https://github.com/Sleepywalker69/ps5-y2jb-autoloader/releases/tag/v0.1.0-1360-manual

Roger115 · Wednesday at 4:55 PM

I have jailbroken my 13.60 ps5 and then decided to buy a second hand ps5 for online games, but now that it has arrived i see that this one is on 11.20, usually the older the firmware the better, so, should i wipe and recover the JB PS5 to use for online and go to the hassle of jailbreaking the second one, or is there no substantial difference between the 2 versions to be worth it?

kevin corms · Wednesday at 4:56 PM

Roger115 said:
I have jailbroken my 13.60 ps5 and then decided to buy a second hand ps5 for online games, but now that it has arrived i see that this one is on 11.20, usually the older the firmware the better, so, should i wipe and recover the JB PS5 to use for online and go to the hassle of jailbreaking the second one, or is there no substantial difference between the 2 versions to be worth it?

11.20 is better since its low enough to support fpkg imo. Might not be much difference in the near future, but its better for now.

AlphaBravo · Wednesday at 5:32 PM

My first major problem. Installed various fkpg games with backports, with no issues.
Until trying "Sword of the Sea". Fw required 10.xx but I found a backport file that was supposed to work on my 6.02. Game was dumped and I created backport folder for SM+ in homebrew section. Worked before using that method with other games.

Only use two payloads. Kstuff Dr test 6 and SM+ beta 3. Sm+ config files are default. After installing and launching Sword of the Sea I get these errors....

"Failed to open descriptor file../../../surfer/surfer.project"

And then separate and final error

Debug: "PPSAxxxx crashes before kstuff was paused. Kstuff is not the cause."

Fine,doesn't work and that was possibility because backport was not tested on my fw.
But when I tried to open other games in my selection, suddenly got the exact same debug error. Wouldn't play when were ok before.

Wondering if anyone had this issue before and found a fix. I deleted the game and backport folder, reset console but still problem persist for ALL games.

peteruk · Wednesday at 5:49 PM

AlphaBravo said:
My first major problem. Installed various fkpg games with backports, with no issues.
Until trying "Sword of the Sea". Fw required 10.xx but I found a backport file that was supposed to work on my 6.02. Game was dumped and I created backport folder for SM+ in homebrew section. Worked before using that method with other games.

Only use two payloads. Kstuff Dr test 6 and SM+ beta 3. Sm+ config files are default. After installing and launching Sword of the Sea I get these errors....

"Failed to open descriptor file../../../surfer/surfer.project"

And then separate and final error

Debug: "PPSAxxxx crashes before kstuff was paused. Kstuff is not the cause."

Fine,doesn't work and that was possibility because backport was not tested on my fw.
But when I tried to open other games in my selection, suddenly got the exact same debug error. Wouldn't play when were ok before.

Wondering if anyone had this issue before and found a fix. I deleted the game and backport folder, reset console but still problem persist.

I had a similar problem with gt7, no previous problems but the exact same problem and error message. in the end i went the .exfat way and it worked fine... didn't find a fix, so went the other route

TaylorJones · Wednesday at 5:49 PM

AlphaBravo said:
My first major problem. Installed various fkpg games with backports, with no issues.
Until trying "Sword of the Sea". Fw required 10.xx but I found a backport file that was supposed to work on my 6.02. Game was dumped and I created backport folder for SM+ in homebrew section. Worked before using that method with other games.

Only use two payloads. Kstuff Dr test 6 and SM+ beta 3. Sm+ config files are default. After installing and launching Sword of the Sea I get these errors....

"Failed to open descriptor file../../../surfer/surfer.project"

And then separate and final error

Debug: "PPSAxxxx crashes before kstuff was paused. Kstuff is not the cause."

Fine,doesn't work and that was possibility because backport was not tested on my fw.
But when I tried to open other games in my selection, suddenly got the exact same debug error. Wouldn't play when were ok before.

Wondering if anyone had this issue before and found a fix. I deleted the game and backport folder, reset console but still problem persist.

Ive had that issue with non fpkg games and it was fixed when I updated to beta 5 of shadowmount plus.

AlphaBravo · Wednesday at 5:58 PM

TaylorJones said:
Ive had that issue with non fpkg games and it was fixed when I updated to beta 5 of shadowmount plus.

I only use fpkg games.

With SM+, do you have to do a clean install or can you just send different payloads depending on which version you want e.g test3, test 4, etc?

TaylorJones · Wednesday at 6:03 PM

So long as you make sure the other version is no longer running you can run which ever you please.

Mc_Kuc · Wednesday at 6:23 PM

Thinking of getting a Slim Wolverine edition. Do you know what fw they ship with? For sure <13.60.
Anybody here got one?

Kimberly_g · Wednesday at 6:28 PM

Mc_Kuc said:
Thinking of getting a Slim Wolverine edition. Do you know what fw they ship with? For sure <13.60.
Anybody here got one?

https://www.psdevwiki.com/ps5/Serial_Number_guide

wolverine starts at 13.20 no end serial available, but i would say it's below 14 because these consoles are made in Asia and need to be shipped to wherever you live (in a container by boat), so that takes at least a month. I think end of the month we might be seeing consoles that are 14.xx out of the box.

Also there is a manufacturing date at the bottom of the box, use that as your guide. before september 2026 = Go! I recently bought a new one mfd 10.2025, it was on firmware 12.00

HS2005 · Wednesday at 7:19 PM

Some info who those who care and / or are interested.

This is obv. a different method than the 13.60 that already has been shown.

Post automatically merged: Wednesday at 7:22 PM

PS5SX2 2.10

New

PS2 discs on the PS5 home screen. Put a PS2 DVD in the console's drive while you are on the home screen: a tile with the game's name and cover shows up in about 6 seconds, and the PS5's own "Unsupported Disc" tile is hidden. Press ✕ on it and the game starts straight from the disc (or from its copy in games/, if you made one): no shelf, no question. Take the disc out and the tile goes away.
A "Reload PS2 Disc" tile. If a disc's tile does not come, does not start, or the "Unsupported Disc" tile stays: press this tile once. It cleans up after the last game, has ShadowMount+ look again and makes the disc's tile again. A pop-up says "PS2 disc reloaded." a few seconds later.
A question on the shelf. With PS5SX2 open, a PS2 disc that is not copied yet asks Play from disc or Copy to storage (Left / Right choose, ✕ confirms, ○ is "not now"). Play from disc starts at once and reads the disc as you play, like a real PS2, so the disc has to stay in. Copy to storage copies it first (several minutes) and plays from the copy: faster loading, and the disc can come out. A disc that games/ already holds starts from its copy with no question. So you can still dump a disc through the shelf, and once it is dumped, starting its game from the tile runs the dump instead of the disc.

Changed

A PS2 disc put in on the home screen no longer starts PS5SX2 by itself: press its tile.
The empty file nodiscask in /data/PCSX2/flags/ brings the 2.03 behaviour back: no question on the shelf, and a disc put in on the home screen is copied and started by itself. Use it if you don't use ShadowMount+, because the tiles need it.

Link: https://github.com/Swordpdf/PS5SX2/releases/tag/vk-285-171

Blythe93 · Wednesday at 7:24 PM

How's the FPKG support right now, on which firmware versions FPKGs are working?

AlphaBravo · Wednesday at 7:28 PM

TaylorJones said:
Ive had that issue with non fpkg games and it was fixed when I updated to beta 5 of shadowmount plus.

Unfortunately did not fix issue using SM beta 5. Odd to me that launching one game with it's backport has now prevented launching any other game that previously worked.

HS2005 · Wednesday at 7:33 PM

Blythe93 said:
How's the FPKG support right now, on which firmware versions FPKGs are working?

Currently "public" is max up to firmware 11.60. This means install and launch, with compatible jailbreak components.
Any higher FW and fpkg packages may install, but PS5 fpkg games cannot launch through the standard method. Exception is homebrew that has been ported for max 13.60.

TheStonedModder · Wednesday at 7:48 PM

So what’s the hype with this hyperHen thing?

Ain’t it just another onionhen clone that may or may not be supported in a month?

Blythe93 · Wednesday at 7:51 PM

HS2005 said:
Currently "public" is max up to firmware 11.60. This means install and launch, with compatible jailbreak components.
Any higher FW and fpkg packages may install, but PS5 fpkg games cannot launch through the standard method. Exception is homebrew that has been ported for max 13.60.

I see. I've found this image on Reddit:

I still have my Astro Bot FFPKG file as well as the original game dump in folders and files. Is there a tool that you guys use to convert those dumps into FPKGs? Some games require backports as well. On console, I've seen that AMPR emulator is required for some games as well. Will that work on my PS5 5.00? For example, Ghost of Yotei I've seen that it has a backport that works up to 4.03 or something and that there's a ampr_emu.index file with the fix for the loading splash screen. How to even run AMPR emu?

Still new to FPKGs so I'd like to get as much info as possible before I start converting my game dumps.

HS2005 · Wednesday at 7:54 PM

zebrone said:
For mod the directory required is app0/asset/mods...

But im using an external nvme
and the dir is /mnt/usb0/eden/asset/roma,mods..etc...

So are your directories in eden folder,not in eden/assets/...?

Have I answered this already? I get like a zillion messages per day. So I'm overlooking some messages.

I am using an internal M2. So that would be /mnt/ext1/
You are using a external M2. So that would be /mnt/usb0/ < depending if this is your front USB-C port. If not. Check usb0~usb7. It depends what port you plug your USB in.

In ProsperoEden > map that folder via settings. This is how it looks on the FTP:

Post automatically merged: Wednesday at 7:57 PM

Regarding cheats. I have not looked into it, but I have tried some things. Could not get it working (yet).
I proposed a UX enhancement. You can check this: https://github.com/blackbearreloaded/ProsperoEden/issues/132

Eva888 · Wednesday at 8:16 PM

AlphaBravo said:
My first major problem. Installed various fkpg games with backports, with no issues.
Until trying "Sword of the Sea". Fw required 10.xx but I found a backport file that was supposed to work on my 6.02. Game was dumped and I created backport folder for SM+ in homebrew section. Worked before using that method with other games.

Only use two payloads. Kstuff Dr test 6 and SM+ beta 3. Sm+ config files are default. After installing and launching Sword of the Sea I get these errors....

"Failed to open descriptor file../../../surfer/surfer.project"

And then separate and final error

Debug: "PPSAxxxx crashes before kstuff was paused. Kstuff is not the cause."

Fine,doesn't work and that was possibility because backport was not tested on my fw.
But when I tried to open other games in my selection, suddenly got the exact same debug error. Wouldn't play when were ok before.

Wondering if anyone had this issue before and found a fix. I deleted the game and backport folder, reset console but still problem persist for ALL games.

It looks like big problem (all games broken)... Do you fixed it?

flopsy · Wednesday at 8:33 PM

AlphaBravo said:
Wondering if anyone had this issue before and found a fix. I deleted the game and backport folder, reset console but still problem persist for ALL games.

Have you tried cleaning out all SM+ files and relaunched? Haven't had the issue myself.

truemaster · Wednesday at 8:47 PM

https://github.com/Michele-M-Media/HYPERHEN i close look this mhow is developing

PS5 Hack Status:

Preparing Your Console:

Select Your Jailbreak:

Additional Information:

Warnings:

Archived Information

The destroyer of worlds

ps5-theme 1.60​

Which file?​

Updating​

New in 1.60 (since 1.59)​

Checked​

Experimental Y2JB + Byepervisor manual-mode release for PS5 13.60​

Y2JB 13.60 Manual Mode (Experimental)​

Install and run​

New Member

Well-Known Member

Well-Known Member

DMT hyperspace

New Member

Well-Known Member

New Member

Well-Known Member

Active Member

The destroyer of worlds

PS5SX2 2.10​

The Treasure Tracker

Well-Known Member

The destroyer of worlds

Developer

The Treasure Tracker

The destroyer of worlds

Active Member

Well-Known Member

Well-Known Member

Similar threads

Popular threads in this forum

ps5-theme 1.60

Which file?

Updating

New in 1.60 (since 1.59)

Checked

Experimental Y2JB + Byepervisor manual-mode release for PS5 13.60

Y2JB 13.60 Manual Mode (Experimental)

Install and run

PS5SX2 2.10