PS5 Exploit Guide

PS5 Hack Status:

FW Ranges:
2.XX = PS4/5 backups (KEX+HV+Linux) + keys exploit (WK: 2.50 best / 2.7X max)
3.XX = PS4/5 backups (KEX+HV+Linux) + keys exploit (WK/BD/LUA: 3.20 best / 3.21 max)
4.XX = PS4/5 backups (KEX+HV+Linux) + keys exploit (WK/BD/LUA (Y2/NF/YARPE 4.03+): 4.50 best / 4.51 max)
5.XX = PS4/5 backups (KEX+HV+Linux) + keys exploit (WK/BD/Y2/NF/LUA/YARPE: 5.50 best + max)
6.XX = PS4/5 backups (KEX+HV+Linux) (BD/Y2/NF/LUA/YARPE: 6.50 max)
7.XX = PS4/5 backups (KEX+HV+Linux) (WK/BD/Y2/NF/LUA/YARPE: 7.61 best + max)
8.XX-10.00 = PS4/5 backups (KEX+HV+Linux) (WK/BD/Y2/NF/LUA/YARPE)
10.01-12.70 = PS4/5 backups (KEX+HV+Linux) (WK/BD/Y2/NF/LUA/YARPE)
13.XX-13.60 = PS4/5 backups (KEX+HV+Linux) (WK/BD(13.42)/Y2/LUA/YARPE)
14.XX = No public KEX, HV/A53 patched in 14.20, UL ONLY (LUA/YARPE)

NOTE 1: Recommended firmware is subjective. Staying low is always recommended.
NOTE 2: Do not update too many major versions (e.g., 4.xx to 5.xx or 7.xx to 8.xx). Remain low unless all you want is backups.
NOTE 3: P2JB can take over an hour to exploit on FW up to 12.70.

Hypervisor (HV):
Highest released HV: 13.60
Highest unreleased HV: 14.00
*unreleased/unimplemented

Kernel (KEX):
Highest released KEX: 13.60 (ReLapse)
Highest unreleased KEX: 14.10 (Gezine)
UMTX2: 1.00-7.61 (*WK to 5.50 / BDJB to 7.61)
Lapse: 1.00-10.01
Relapse: 7.00-13.60
Poopsploit: 4.03-12.00 (*BD to 12.00)
P2JB: 9.00-12.70 (*WK: Lapse to 10.01 / P2JB to 12.70)

Userland (UL):
Webkit: 1.00-5.50 (PSFREE +UMTX2) / 7.00-13.60 (RELAPSE) (Recommended)
LUA (Artemis): 2.00-LATEST (LUA exploit, + Lapse up to 10.01)
Y2JB: 4.03-13.40 (YouTube exploit, + Lapse: 10.01 / P2JB: 12.70)
NFNH: 4.03-12.XX (Netflix exploit, + Lapse: 10.01)
YARPE: 4.03-12.XX (Ren'Py exploit, + Lapse: 10.01 / P2JB: 12.70)
BD-JB: 1.00-13.42 (BD exploit + UMTX2: 7.61 / BD-JB5 + Poops to 12.00) (14.XX SOON)
Mast1C0re: 1.00-7.61 (Depreciated for LuaC0re)
LuaC0re: 1.00-12.70 (Poops: 4.03-12.00/P2JB: 9.00-12.70)
REDIS: 1.00-5.50 (Jordy's untethered JB on boot)

NOTE 1: A userland entry point (UL) chained to kernel exploit (KEX) is required to exploit your console at bare minimum.
NOTE 2: Consoles 7.00-13.60 should now use WebKit and RELAPSE (Recommended)

Useful Applications:
FPKG: 3.00-11.60 (KStuff Lite) / 12.XX-13.60 (KStuff-NG SOON)
Kstuff Lite: 3.00-12.70 HERE
Kstuff Toggle: 3.00-12.00 HERE
PS5 App Dumper: 3.00-13.60 HERE
Dump Runner: 3.00-12.00 HERE
Dump Installer: 3.00-12.00 HERE
Backporting: Possible (backpork / Porkfolio)
PS4/PS5 DLC: Work with Kstuff Lite
Trophies: Work with Kstuff Lite
Compression: Works with Kstuff Lite
Homebrew Enabler: etaHEN (3.00-10.01) latest HERE
PS5 Backup manager: ItemzFlow Compatibility list: HERE
PS4 Backup Loading: Works (rest mode & backports work, can crash).
PS5 Debug NG: 3.XX-13.XX HERE
PS5 Remote Play: Works HERE & HERE
PS5 Trainers/Cheats: Work

UART: HERE
Linux: (OG: 3.00-13.60) HERE
Kldload (wip): 3.00-6.50 HERE
PSN access: NEVER
Latest OFW: 14.22 (2/11/26)
Summarised OFW/Model guide: HERE
1.XX-7.61 compatibility list: HERE
PS5 SDK Repo: HERE
Legit PKG Updates: HERE or HERE
OFW Updates: HERE (history HERE)

Preparing Your Console:

It is recommended to either self-host offline or block these addresses in your router to avoid accidental updates or getting an update nag. Using the DNS method is no longer failsafe, as these are not guaranteed to be running 24/7.

Spoiler: Addresses to block to avoid updates:

dau01.ps5.update.playstation.net
dbr01.ps5.update.playstation.net
dcn01.ps5.update.playstation.net
deu01.ps5.update.playstation.net
dhk01.ps5.update.playstation.net
djp01.ps5.update.playstation.net
dkr01.ps5.update.playstation.net
dmx01.ps5.update.playstation.net
dru01.ps5.update.playstation.net
dsa01.ps5.update.playstation.net
dtw01.ps5.update.playstation.net
duk01.ps5.update.playstation.net
dus01.ps5.update.playstation.net
fau01.ps5.update.playstation.net
fbr01.ps5.update.playstation.net
fcn01.ps5.update.playstation.net
feu01.ps5.update.playstation.net
fhk01.ps5.update.playstation.net
fjp01.ps5.update.playstation.net
fkr01.ps5.update.playstation.net
fmx01.ps5.update.playstation.net
fru01.ps5.update.playstation.net
fsa01.ps5.update.playstation.net
ftw01.ps5.update.playstation.net
fuk01.ps5.update.playstation.net
fus01.ps5.update.playstation.net
hau01.ps5.update.playstation.net
hbr01.ps5.update.playstation.net
hcn01.ps5.update.playstation.net
heu01.ps5.update.playstation.net
hhk01.ps5.update.playstation.net
hjp01.ps5.update.playstation.net
hkr01.ps5.update.playstation.net
hmx01.ps5.update.playstation.net
hru01.ps5.update.playstation.net
hsa01.ps5.update.playstation.net
htw01.ps5.update.playstation.net
huk01.ps5.update.playstation.net
hus01.ps5.update.playstation.net
sgst.prod.dl.playstation.net
gs2.ww.prod.dl.playstation.net

Alternative DNS IP:
62.210.38.117 - User Guide = ES7in1
or
45.56.67.85
(Leave DNS 2 blank)

Spoiler: System Update Information

To determine your OFW version:
Go to settings > system > console information.

Version string info:
Year.Half (1st/2nd half of the year)-Major Version No.Minor Version No.Extended info-Further Info.Retail/Debug

21.02-04.03.00.00-00.00.00.0.1

It is recommended to keep your console as low as possible to have access to better jailbreak stability and features. Stay as low as possible within the "Golden" firmware brackets that apply to your current firmware, see the top of this page.

(No jailbreak is ever guaranteed. No developer is obliged to release anything publicly)

WARNING:
Only update OFW manually via USB by getting the firmware file from HERE and installing from <USB>:/PS5/UPDATE/PS5UPDATE.PUP
(Updating with RECOVERY PUP will perform a factory format and will wipe your internal HDD)

PS5 factory mode PUP installation path:
/usb/PROSPERO/UPDATE/PROSPEROUPDATE.PUP

NOTE: Make a system back up before attempting any modifications.
On console: go to [Settings] > [System] > [System Software] > [Back Up and Restore] > [Back Up Your PS5]

Select Your Jailbreak:

WEBKIT:BD-JB:LUA:Y2JB:NFNH:YARPE:LuaC0re:BD-UN-JB:

1. 
   Information:
   Firmware 1.00-5.50 or 7.00-13.60 is required for the webkit exploit.
   
   Enabling web browser:
   Open [Settings] > select [Users & Accounts] > select [YouTube] > click "Link" > click "use browser" > click "terms" (bottom right) > click google apps icon (top right) > select Google Search.
   
   Exploiting 1.00-5.50:
   Enter https://zecoxao.github.io/luasauce/ or https://github.com/kmeps4/PSFree into google > click “Jailbreak" or wait for it to complete.
   
   Exploiting 7.00-13.60:
   
   https://ntfargo.github.io/Relapse-Exploit/
   
   https://zecoxao.github.io/bagagwa/
   
   https://soniciso1.github.io/poopicker/
   
   Debug settings will be loaded, and the package installer can be found under [SETTINGS] > [DEBUG SETTINGS].
   
2. 
   Important:
   You will need a BD dive paired to your Slim/Pro console or an OG Phat model . Consoles must be on 1.00-13.42 to run this exploit.
   
   Recommended ISO: Viktorious AIO Auto BD-JB ISO for 4.XX-7.61
   
   Exploiting: 1, Burn ISO to a blank BD-R or BD-RE > Insert into console > click on the [DISC PLAYER] icon.
   
   2, Highlight [PIPELINE RUNNER] > click option 2 [Normaljailbreak-etaHEN-UMTX1.pipe] to auto load etaHEN ready for ItemzFlow.
   
   ELF Loader uses PS5 IP: port 9021 / BIN loader uses 9020 / Jar loader uses port 9025
   
   Debug settings will be loaded, and the package installer can be found under [SETTINGS] > [DEBUG SETTINGS].
   
3. 
   Important:
   LUA entry point works from 2.00 to the latest OFW, but there is no KEX above 12.70 yet.
   (A compatible PS4 game is required to launch the exploit on PS5. See below)
   
   Your PS5 console must be activated to use save copying for PS4 games.
   
   1. Insert your game disc and, as soon as possible, make a save file within it.
   2. Copy the save files to USB, go to [SETTINGS] > [STORAGE] > [CONSOLE STORAGE] > [SAVE DATA] > [PS4 GAMES] > select the game save and copy to a USB drive.
   3. On PC, using a Google Drive account, make a new folder with the GAME ID of your game, and upload the savedata & savedata.bin files to that folder.
   4. Share the folder, set it to editor mode, share with anyone, and click "copy the link".
   5. Join the HTOS Discord group: HERE type "/decrypt", select "FALSE" for including SCE_SYS, paste or type in the Google Drive link, and press enter. The bot should begin mounting your save. (If it doesn't, paste in the link again.)
   6. Click "ENCRYPTED" to remove the Sony PFS layer. Download the generated files and extract the folder to your desktop (you should have 4 files in there and be named dec_savedata_CUSA[GAME ID]).
   7. Using REMOTE LUA LOADER, open the savedata folder, copy the 20 files within into your encrypted save folder on your desktop.
   8. Upload the encrypted save folder (now with 24 files in) to your Google Drive. It should be named "dec_savedata_CUSA[GAME ID]" where GAME ID is your games 5 digit number, and set it to editor mode, share with anyone, and then click "copy the link".
   9. Go back to the HTOS discord server, and type "/encrypt", hit "FALSE" for uploading individually, and "FALSE" to include SCE_SYS. Finally, hit shared_gd_link and paste in your link to the original save (4 files) folder. (If it doesn't, paste in the link again.)
   10. When this is done, paste the link to the decrypted save (24 files) folder, and the bot will encrypt the files.
   11. Resign the files by typing "/resign" followed by your account name on the console, or PSN ID associated with that account if using the latest OFW.
   12. Download the resigned files, extract the files to your USB drive and overwrite them into the savedata folder on your USB or external drive.
   13. Copy the saves back to your console [SETTINGS] > [SAVE DATA AND GAME/APP SETTINGS] > [SAVE DATA PS4] > [COPY OR DELETE FROM USB] > [COPY TO CONSOLE STORAGE] > select your game save folder from the USB drive and copy/overwrite old save data.
   14. Load LUA game again, and you should see the LUA LOADER screen.
   15. You can use "SEND_LUA.PY" to send the UMTX files to the loader.
   (NOTE: Some games require manual loading of save game)
   
   On firmware up to 7.61, you can now load UMTX/2 followed by etaHEN by sending the files to your console IP on PORT 9026.
   On firmware 8.00-LATEST, you can connect with the REMOTE LUA LOADER APP to send debug notifications or FTP on port 1337.
   
   LUA Loader: HERE or HERE
   
   Auto LUA Loader Fork: HERE
   
   Compatible LUA games:
   Aerial Life (CUSA17122)
   Aibeya (CUSA17068)
   Aikagi 2 (CUSA19556)
   Aikagi Kimi to Issho ni Pack (CUSA16229)
   Aikano Yukizora no Triangle (CUSA19370)
   Boku to Nurse no Kenshuu Nisshi (CUSA12049)
   Boku to Joi no Shinsatsu Nisshi (CUSA18107)
   Fuyu Kiss (CUSA29745)
   Hamidashi Creative (CUSA27389)
   Hamidashi Creative Demo (CUSA27390 requires the latest OFW to download from PSN)
   Haruoto Alice (CUSA14324)
   IxSHE Tell (CUSA17112)
   IxSHE Tell Demo (CUSA17126)
   Jinki Resurrection (CUSA25179)
   Jinki Resurrection Demo (CUSA25180 requires the latest OFW to download from PSN)
   Maid-san no Iru Kurashi (CUSA18106)
   Nora Princess and Stray Cat Heart HD (CUSA13303: Rename save9999.dat into nora_01.dat)
   Nora Princess and Strat Cat Heart 2 (CUSA13586)
   Raspberry Cube (CUSA16074)
   Winter Guest (CUSA11977)
   
   WARNING: using demos is free but can become corrupt, and you cannot upgrade your internal HDD either. If you lose the demo you can no longer use the exploit. Disc recommended.
   
   Incompatible LUA games:
   Dokyusei Remake Csver (CUSA47117)
   Dōkyūsei: Bangin' Summer - Home Edition Demo (CUSA47132)
   Kiss Trilogy (CUSA19341)
   Love Clear Demo (CUSA18109)
   Mikagami Sumika no Seifuku Katsudou (CUSA11481)
   Sen no Hatou, Arazone no Hime (CUSA09647)
   Tonari ni Kanojo no Iru Shiawase: Two Farce (CUSA09825)
   Tonari ni Kanojo no Iru Shiawase Summer Surprise (CUSA18998)
   
   Debug settings will be loaded, and the package installer can be found under [SETTINGS] > [DEBUG SETTINGS].
   
4. 
   Requirements:
   PS5 console must be on 4.03-12.70 and previously activated through PSN or fake activated to use the YouTube app, unless you're restoring a backup.
   (Note: restoring a backup will factory reset your console).
   
   Information:
   If updating and older installation, download the latest download0.dat > use FTP or PS5 Explorer to place it in the user/download/PPSA01650 folder.
   
   Preparation:
   Download the Y2JB_backup_X.X(4.03) if you're on 4.03-12.40, or the Y2JB_backup_X.X(12.20) if you're on 12.60 or higher from HERE
   On PC: format a USB 3.0 HDD to exFAT, and copy the PS5 folder from the backup to the root, and put the latest nanodnf.efl from nanoDNS to the root too.
   On console: go to [Settings] > [System] > [System Software] > [Back up and Restore] > [Restore] > select the y2JB back up & let it install (the console will reboot when complete).
   (Note: The exploit will now be accessible under the [MEDIA] tab)
   
   Exploiting:
   Going to [Settings] > [Network] > [Settings] > [Set up Internet Connection] > [Set up Manually] > set up a wireless or LAN connection > change [DNS Settings] to manual > change [Primary DNS] to 127.0.0.1 > click [Done] > open the [YouTube App].
   (Note: Ignore and internet connection issue warnings)
   
   Firmware up to 10.01 will use Lapse Kernel Exploit. Firmware 10.20-12.70 and above will use P2JB and could take up to an hour.
   
   You can send payloads using netcat GUI to PS5's IP Address & port 9021.
   
   You can swap the download0.dat to itzPLK version for auto loading and payload manager in future (payload manager accessible through browser on 127.0.0.1:8084)
   
   Debug settings will be loaded, and the package installer can be found under [SETTINGS] > [DEBUG SETTINGS].
   
5. 
   Requirements:
   PS5 console must be on 4.30-10.01 and previously activated through PSN or fake activated. You will need a 256GB external HDD (minimum).
   
   Preparation:
   Download balenaEtcher
   Download the latest Extended Storage or M.2 Image (select your m.2's capacity)
   
   EXTERNAL DRIVE METHOD (Netflix_PS5_EU_Ext.7z):
   1a, On PC: connect your 256GB (min) USB drive to your Windows/Mac/Linux PC > extract the image to your computer > open Etcher > click [Flash From File] & select the extracted image *.zip > click [Select Target] & choose the external drive > Click [Flash!] & allow it to complete.
   (Note: 256GB is the smallest drive you can use)
   
   2a, On console: click [Settings] > [Storage] > [USB Extended Storage] > [Games and Apps] > press X on [Netflix] > select [NETFLIX] under items to move > select [Move] > move to internal storage & allow it to complete.
   (Note: The exploit will now be accessible under the [MEDIA] tab)
   
   INTERNAL DRIVE METHOD (Netflix.XXXXGB.7z):
   1b, On PC: connect the M.2 to your Windows/Mac/Linux PC > extract the image to your computer > open Etcher > click [Flash From File] & select the extracted image *.zip > click [Select Target] & choose the external drive > Click [Flash!] & allow it to complete.
   (Note: 4TB will take 80 mins, 2TB 45 mins, 256GB 10 mins)
   
   2b, On console: Power off the console > insert the M.2 SSD > power on the console > click [Settings] > [Storage] > press X on [Netflix] > select [NETFLIX] under items to move > select [Move] > move to internal storage & allow it to complete.
   (Note: The exploit will now be accessible under the [MEDIA] tab).
   
   Exploiting:
   1a, for consoles 10.01 and below, on console: go to [Settings] > [Network] > [Settings] > [Set up Internet Connection] > [Set up Manually] > set up a wireless or LAN connection. Go to Proxy > change [Automatic] to [Manual] > enter Address: 172.105.156.37 & port: 42069 > click [Done] > open the [Netflix App].
   (Note: Ignore and internet connection issue warnings)
   
   1b, for consoles 10.20-12.70, COMING SOON.
   
   Debug settings will be loaded, and the package installer can be found under [SETTINGS] > [DEBUG SETTINGS].
   
6. 
   Important:
   YARPE works from 4.30 to 12.70 (9.00 - 12.07 via P2JB)
   (A compatible PS4 game is required to launch the exploit on PS5. See below)
   
   Requirements:
   PS5 console must be on 4.30-10.01 to use this exploit.
   
   Exploiting:
   coming soon
   
   Debug settings will be loaded, and the package installer can be found under [SETTINGS] > [DEBUG SETTINGS].
   
7. 
   Requirements:
   PS5 console must be on 4.30-12.70 to use this exploit. SWRR
   
   Exploiting:
   coming soon
   
   Debug settings will be loaded, and the package installer can be found under [SETTINGS] > [DEBUG SETTINGS].
   
8. 
   
   [UPDATED]
   No longer needed if using latest WebKit (to 13.60) or BD-JB (to 13.42)!
   
   Important:
   This method modifies the BD-J stack to allows BD-JB entry point to be re-enabled on consoles up to 13.60, for convenience only.
   
   Very Important:
   This method requires your console to be jailbroken by another method first to gain access to alter the files.
   
   https://github.com/Gezine/BD-UN-JB
   
   Preparation:
   Burn the ISO to a blank Blu Ray, insert it into the jailbroken console. Send the bdj_unpatch.elf to elfldr using netcat GUI to PS5's IP Address & port 9021 to unpatch BD-J.
   
   (NOTE: DO NOT REINSTALL/UPDATE FW, IT WILL WIPE THE PATCH AND LOSE BD-JB)
   

Once jailbroken it is recommended to run KSTUFF LITE and SHADOWMOUNTPLUS at minimum to get you up and running.
(ShadowMountPlus: is an automated background auto-mounter payload for jailbroken PS5 consoles. Detects, mounts, and installs game dumps from internal or external storage, with support for UFS, exFAT, PFS, and nested compressed PFS containers)

Additional Information:

Blocking Updated with nanoDNS:
Set primary DNS manually to 127.0.0.1. Send latest elf to BIN LOADER using netcat GUI to PS5's IP Address & port 9021.

PS4 GAME INFORMATION:
OFW 1.xx cannot run PS4 games.
OFW 2.xx runs PS4 games up to 8.03
OFW 3.xx runs PS4 games up to 8.52
OFW 4.xx runs PS4 games up to 9.04
OFW 5.xx runs PS4 games up to 9.60
OFW 6.xx runs PS4 games up to 10.50
OFW 7.xx runs PS4 games up to 11.00
OFW 8.xx/9.xx runs PS4 games up to 11.50
OFW 10.xx runs PS4 games up to 12.00
OFW 11.xx runs PS4 games up to 12.50
OFW 12.xx runs PS4 games up to 13.00
OFW 13.xx runs PS4 games up to 13.42
OFW 14.xx runs PS4 games up to 14.00

(Note: PS4 backported FPKGs also work perfectly on an exploited PS5 with Kstuff)

You can install free/demo PKGS (legit pkgs) via the debug pkg installer, provided you have all the files/json/licences required.
(Astro’s Playroom has no licences and can be installed and played from official pkgs and updated inline with your firmware)

Warnings:

1: Never enable IDU mode.
If you do, you will need to enter staff mode by holding L1 + L2 and tapping this combo: circle, cross, square, triangle, right D-Pad. Release L1 + L2, and you can access settings to exit IDU.

2: Try to stay on the lowest FW possible and wait for hacks on that firmware.

3: Installing legit game PKGs you do not own will never work, even if spoofed.

4: If you get stuck in a boot loop at the PS logo, the SNVS is corrupted (if the hash check fails on boot, this causes a “soft brick”). It’s not “bricked”. Simply reinstall your current firmware RECOVERY PUP in safe mode from USB: PS5 > UPDATE > PS5UPDATE.PUP.

Archived Information

Spoiler

https://github.com/astrelsky/libhijacker

https://github.com/illusion0001/libhijacker

https://github.com/TheOfficialFloW/Presentations/blob/master/2022-hardwear-io-bd-jb.pdf

https://github.com/sleirsgoevy/bd-jb

https://github.com/psxdev/bd-jb

https://gbatemp.net/download/remount-system-with-write-permissions.37807/

https://github.com/john-tornblom/ps5-payload-sdk

https://github.com/john-tornblom/bdj-sdk/actions/workflows/bdjb.yml

 

[synderella]

[Personal Update]

Still haven’t had time to jailbreak anything lol, but, I have decided to update to 5.50 for a couple of reasons:

• Redis, auto jailbreak on start-up.
• PSVR2 minimum firmware.
• Low enough to retain certain memes.

I have downloaded the 5.50 PUP and the various files I’ll need. I’m aiming to keep it super minimal when I do eventually get to it.

Suggest me your best/minimal set-ups using payload manager please

Do not use redis. I've seen too many reports that it's actually crashes the system with KP. Whats even worse that it's not just crashes on start, but it can crash in the middle of the game and testers couldn't figure out what caused that. Same game played normally when console was jb'd manually.

I'm perfectly fine at 4.50 with webkit autoloader 0.5.2 and kstuff/sm+/lapyjb/nanodns. Easily covers 99% of my needs from console.

 

[Elrinth]

I have 13.40 and after relapse... getting into home screen takes 5 minutes every single time...
Very nice... any fix?
Edit: Solved by setting DNS to 127.0.0.1 instead of my computer IP!

 

[truemaster]

Have there been any notable KPs with Redis?

what is redis?

 

[Kimberly_g]

I have 13.40 and after relapse... getting into home screen takes 5 minutes every single time...
Very nice... any fix?

the vanilla jailbreak (kex+elfldr) shouldnt do that.

Maybe a payload is causing the delay, try just the jailbreak and go back to the main menu, if that goes quick, go back to the webkit releapse (which i assume you use) and load the payloads necessary to boot homebrew

-kstuff or onionhen or etahen, whichever you use
- SM++
- any other payloads you need

but everytime you load a payload go back, until you know which one is causing the delay.

 

[peteruk]

Have there been any notable KPs with Redis?

Not sure if relevant as I use 4.03 (as you know ) I used Redis since it was released, at first it was great but then every other time i booted it would KP and crash requiring rebuild repair whatever. The main problem I came across was that sometimes it would happen 3 or 4 times in a row and it kicked in so quickly that it was as if the machine was fu**ed

Removed Redis and just use autowebkit with latest drakmor kstuff fast in rest mode and no issues since, it's rock solid

 

[Elrinth]

the vanilla jailbreak (kex+elfldr) shouldnt do that.

Maybe a payload is causing the delay, try just the jailbreak and go back to the main menu, if that goes quick, go back to the webkit releapse (which i assume you use) and load the payloads necessary to boot homebrew

-kstuff or onionhen or etahen, whichever you use
- SM++
- any other payloads you need

but everytime you load a payload go back, until you know which one is causing the delay.

i am not using any payload... i just try to get into home screen...

Maybe network/DNS/Sony-service timeouts is the culprit? i still have my PC as DNS so it doesn't connect to sony servers...

Edit: Yes after disabling internet alltogether = offline boots immediately to home screen INSTANTLY...!!!

 

[_iggyman_]

 

[GrandDestructor]

i am not using any payload... i just try to get into home screen...

Maybe network/DNS/Sony-service timeouts is the culprit? i still have my PC as DNS so it doesn't connect to sony servers...

Edit: Yes after disabling internet alltogether = offline boots immediately to home screen INSTANTLY...!!!

Set DNS to 127.0.0.1 this should fix the boot time issue.

 

[HS2005]

AFAIK kstuff lite does not support fpkg hence I recommend using drakmors kstuff which does. Now I remember the error on kstuff lite was when I tried to open fpkg game

I see. Be on the lookout for kstuff NG. That works with fpkg

It's still in testing phase, but it works and once it will be released it will prob. be updated above kstuff lite.

 

[flopsy]

what is redis?

lmgtfy Its a data storage cache system, speeds things up.

 

[ViRGE]

Okay, I just wanted to check back in and thank everyone for the sanity check and advice.
Maybe sharing my experience can help someone else as stuck as I was.

So, I tried all of the suggestions while still on fw 11.40. Rebuilt databases, cleared caches, reformat system etc.
No dice.
I ended up updating to 11.60. This is not necessarily what ended up solving my issues, though.

The problem still persisted in 11.60 using newest version of y2jb etc.

I ended up using on older version of kstuff and shadowmount specifically -
Kstuff 1.13 dr-test5 & Shadowmountplus 1.7beta3

thanks again y'all, next up getting switch emulation going....looking forward to lurking in this thread going forward.

also Virge, +1 to using sonic as your troubleshooting game.

I'm glad that you got everything sorted out. Though the fact that you needed to use a slightly older version of kstuff/SM+ is concerning. These are admittedly projects that are still under active development (it's beta for a reason), but things have generally been working for everyone. Hopefully it's just a one-off thing; if you aren't able to upgrade to newer versions, that may eventually become an issue.

What "keys" people are constantly talking about? Is this some kind of local meme?

This would be recovering the public keys that the PS5 uses to validate and decrypt content. Right now we can't just decrypt a legit game PKG and all the files inside, for example; we have to use the PS5 as an oracle to decrypt things for us.

Recovering some of the system keys won't get us much closer to getting the private keys needed to sign things. But maybe it will let us do some more interesting things locally?

what is redis?

Redis is a self-loading semi-untethered jailbreak for early firmware consoles. Instead of having to manually fire up an application to trigger the jailbreak (e.g. Y2JB), it leverages a vulnerability in the Redis (Remote Dictionary Server) service to trigger the jailbreaking process automatically.

It's not a fully untethered jailbreak by most standards, but it comes quite close.

Though, as some other people have commented, it is not particularly stable.

 

[BobaFett_UK]

I have a PS5 on 8.6 I believe is y2jb autoloader the recommended to use?

yes 100% works like a charm...

Follows the y2jb instructions from gezine & itsPLK

https://github.com/Gezine/Y2JB

https://github.com/itsPLK/ps5-y2jb-autoloader

 

[HS2005]

v0.1.0​

Hard fork of ampr_emu designed to achieve maximum performance and stability to run zstd and LZ4 converted games.

Copy libSceAmpr.sprx into the game's fakelib/ and mount the game with ShadowMountPlus (disable fakelib update in settings).

zstd and LZ4 packs can be made by ps5-dump-forge.

Link: https://github.com/quer3q/ampr-emu-ng/releases/tag/v0.1.0

Post automatically merged: Saturday at 8:23 AM

Still haven’t had time to jailbreak anything lol, but, I have decided to update to 5.50 for a couple of reasons:

Every step you make is a bit closer the 13.60 family

 

[AlphaBravo]

If not interested in scene "drama" don't read.



Everything is connected whether you like or not. I took a particular interest because of all the Devs I follow, I never liked or respected Zeco. I thought he was toxic, hypocritical and a liability to the scene.
I rarely wish iLL on people but hope Sony fry Zeco ass and all those responsible for leaking/selling private keys on PS4. It's unforgivable!!

So glad I never donated to that POS and wonder what the true consequences will be to the scene as a whole going forward.

For all the wonderful things happening in playstation scene, it also feels like aspects of it could blow up any minute as well.

As it stands, Zeco twitter and online presence is still active. I imagine not for long and hope he does end up on that wiki Wall of shame!

 

[zebrone]

https://github.com/heydemoura/EglantinePS5

 

[Kimberly_g]

https://github.com/heydemoura/EglantinePS5

have you tested MKW and DKB?

what's the performance on a PS5?

i don't have a high end pc so before i obtain these i must be sure the ps5 works.

 

[HS2005]

PS5 Suite v7.8.0​

Bug Fixes​

• Trophy unlocking regression fixed (#16) — 7.7.0 reworked the UDS post path and PostEvent started getting rejected (0x80553102) on some firmware (confirmed on 5.50). The payload now borrows the game's own registered ctx/hnd from the UDS singleton table and posts under the daemon-bound context, with a fallback chain through a fresh per-post handle and the registered handle. Verified end-to-end: daemon-side extraction, real trophy toast, and TRPTITLE.DAT update.
• Progressive-trophy file pinning reworked — file-level earn flags are now deferred until after the daemon's extraction pass, so real daemon awards are never clobbered by our own edits (Onimusha-style evkind==2 titles are left to the daemon; COUNT-based plans skip activityEnd entirely).
• Mobile UI no longer clips (Android + narrow windows) — all pages now adapt below ~700px width: System Monitor cards, Live Sensors, Trophies list+detail, Prospero Store and Games toolbars, Memory Editor panes, and PKG tools stack vertically; Fan Control slider stretches and preset buttons wrap; Memory/PKG pages scroll; long names ellipsize instead of clipping off-screen.

Improvements​

• Responsive desktop window — the same adaptive layout applies to the desktop client when resized below 700px.
• GPL-3.0 license added to the repository.

Known limitations​

• Some titles drive trophies through a custom protocol instead of standard UDS (e.g. reported on Borderlands 4, Code Vein 2) — those can't be unlocked yet; support is on the roadmap.
• PS4 titles/trophies are not supported (legacy PS4 trophy store is a different format) — tracked in #15.

Assets​

• PS5Suite.exe — Windows x64 client (single-file, self-contained)
• PS5Suite-Linux-x64.zip / PS5Suite-Linux-ARM64.zip — Linux clients
• PS5Suite-macOS-x64.zip / PS5Suite-macOS-ARM64.zip — macOS clients
• PS5Suite.apk — Android client (v7.8.0, versionCode 16)
• ps5_suite_server.elf — PS5 payload/server (deploy to port 9021)
• checksums.txt — SHA-256 for every asset

credits to @manosmoyrtzakis
Thank you for working together and continues developments.

Link: https://github.com/manos555555/PS5-Suite/releases/tag/v7.8.0

 

[zebrone]

have you tested MKW and DKB?

what's the performance on a PS5?

i don't have a high end pc so before i obtain these i must be sure the ps5 works.

Never tested. Its not released yet

 

[Blythe93]

[Personal Update]

Still haven’t had time to jailbreak anything lol, but, I have decided to update to 5.50 for a couple of reasons:

• Redis, auto jailbreak on start-up.
• PSVR2 minimum firmware.
• Low enough to retain certain memes.

I have downloaded the 5.50 PUP and the various files I’ll need. I’m aiming to keep it super minimal when I do eventually get to it.

Suggest me your best/minimal set-ups using payload manager please

I doubt that my autoloader setup will be useful to you but my Payload Manager is still on 0.5.2 and I'm using kstuff lite 1.11, ShadowMountPlus 1.7beta5-fix1 and nanodns 0.4. So far no KPs whatsoever. My current load order is: nanoDNS, ShadowMountPlus, kstuff lite, with 3s delay between them. Note that I'm yet to try out some games in FPKG format so I can't really say how stable it really is.

I haven't touched my setup ever since. Busy playing some other games while waiting for more new things to unfold for the PS5 before I go on an CFW updating spree... is what I'd like to say but it's really just a time issue on my end (in addition to work and stuff, I have some stuff to deal with at the village) and a... WiFi coverage issue in my room making all the things slightly more annoying then they need to be.

Gotta say that I'm surprised to see that you've decided to update your console. I'd love to get my hands on PSVR2 (and Dual Sense Edge controller, though that one requires 6.50 I think?), my PSVR v2 is still working great on my PS4 Pro.

 

[le237qk1boglz67w8il1]

Have a question updating JB concerning FW 11.60 (fpkg!).
Atm I am using webkit-autoloader v0.31 & PLM v0.51.
Youtube App PPSA01650, patched v99.999.999 to prevent updating - original version installed I don't know

How can I check the original installed version number?

Can I switch to notmaj0r J2JB?
Requirements for firmware 4.03 to 12.40 get YouTube app (PPSA01650) version 01.000.003 PKG

If so I just need to transfer the provided download0.dat to
/user/download/PPSA01650

I would prefer using PLM
So would need download0-pldmgr.zip
(Same as download0-autoclose.zip, but also launches Payload Manager v0.6.3 automatically after the YouTube app closes)

Then reboot and start Youtube app?