PS5 Exploit Guide

ViRGE · 2026-11-06T10:30:40+0000

truemaster said:
hello i have some troubles running my uncharted legacy of thieves pal dump. i dump it with latest echostrech app dumper 2.10.
but the game refuse to work no mater fakelib version. has anyone a solution on this? i need to see if it works before making fpkg

I probably won't be able to help you with this specific game, but in general it is helpful to anyone else to offer some basic technical details on the console you're working on.

Console type (Fat, Slim, Pro)
Firmware version
Game & game version
Where you are trying (or have tried) to run it from

Checking ProsperoPatches, that game is a FW 5.xx game. Seeing as how you dumped the game yourself, that means you have to be on at least the same firmware. So the need for fakelibs should be limited.

You may be best served by just packing it up in a fPKG (feel free to use a low compression ratio so that it packs up quickly) and seeing what happens. A good number of games simply don't work very well as folder dumps or variations thereof, and need to either be in a specific location and format to work, or require emulation libraries. fPKGs get around both of these issues.

HS2005 · 2026-11-06T10:34:03+0000

SonGoku78 said:
I wanted to give eglantine a try with switch 2 games on my pro so i wanted to ask:
When they talk prod.keys and firmware .nca, are these from my switch 1 which i can dump myself ?
Or is it the same for switch 2 and i would need a dump of those too from an actual switch 2 console ?
FW´s are downloadable, no problem, but are the prod.keys even dumpable on switch 2 ?
Or is the prod.keys file not needed for switch 2 games ?
I didnt read much into it yet.
Thanks

Well this is not really a PS5-related question, however I'll understand the curiosity for giving eglantine for the PS5 a try.
I'm using https://github.com/viejunerd/Eglantine-PS5-/releases/tag/v1.219.015 but not all dumped .NUP games start or run. Keep that in mind.

On your own Modded Switch 1 you will need to generate prod.keys and title.keys and put them in a folder on your PS5 usb or internal drive. I have the folders keys and firmware.

You need Lockpick_RCM_Pro.bin < a payload to extract those keys on your modded Switch 1.
When you start/load Hekate > run/select that payload and then dump the keys from your OWN console. When generated, those files will be on your Switch SD card. Transfer those 2 files to your dektop / PS5.

Below is the folder structure on my PS5:

Post automatically merged: Today at 10:49 AM

Garlic Savemanager update: https://github.com/earthonion/garlic-savemgr/releases/tag/v1.15-beta11
Was running beta-8 yesterday.

Post automatically merged: Today at 10:58 AM

unstaffed7479 said:
Lets say I spent some time finding the offsets for supporting 9.05 in Relapse: To whom would I submit them to if I wanted them getting added to the commonly used relapse 'distributions', i.e. making sure that also the PS5 Pro with that version is supported? The main github repos (ntfargo/soniciso) seem to not take/ignore PRs.

If you really want you can join the PS5 Research & Development Discord via https://discord.gg/5yqNCWFB4.
Don't just spout "I'll going to find some ofssets". Testers and devs are pretty jumpy to those they don't know.
Contact Earthonion is my best bet and from there make some more contacts (on your own risk).

SonGoku78 · 2026-11-06T11:44:21+0000

@HS2005 thanks, i am aware of the dumping process for switch 1, but i would only try switch 2 games, as i own a switch 1.
And yeah, post fits more here because i want to run it on ps5.

So for switch 2 games there is no need for firmware and keys files yes?
Thats great if so

Eva888 · 2026-11-06T11:49:44+0000

HS2005 said:
PS5 Suite v8.0.0
Changed — Remote Play is now truly in-process (Windows x64)

One executable, nothing else — the 430 MB bundled chiaki-ng application from v7.9.0 is replaced by ps5chiaki.dll, a 927 KB shim over chiaki-ng's lib protocol core, plus 9 dependency DLLs (~22 MB). All of it is embedded inside the single PS5Suite.exe and self-extracts to temp at runtime — no second program, no Qt, no window docking.

Video inside the app — decoded frames are converted to BGRA in the shim and rendered into an Avalonia control in the suite's own Remote Play window.

Audio decoded in-process — opus → 48 kHz PCM → Windows waveOut.

Input via controller state API — keyboard maps directly onto ChiakiControllerState (analog L2/R2 at full press).

Credentials feed ChiakiConnectInfo directly — stored 16-byte regist key / morning / account id go straight to chiaki_session_init; no settings sync.

Verified live — pairing, 1080p60 stream, audio, keyboard input, clean disconnect all confirmed on a real console.

Linux/macOS/Android run the full suite but ship without the engine for now — they report it cleanly instead of failing.

Fixed — stream stability

Audio queue use-after-free — buffers were freed while the driver could still be playing them (heap corruption → silent exit). Only WHDR_DONE buffers are reclaimed now.

Session context lifetime — volatile pointer so stop/pull can't race teardown.

Remote Play usage (Windows x64)

Connect to the PS5 (payload running).

Remote Play tab → Pair & Connect — registers this PC once per machine.

Afterwards just Connect.

Keyboard: arrows = d-pad · Enter = ✕ · Esc/Backspace = ◯ · F = □ · T = △ ·
PgUp/PgDn = L1/R1 · Q/E = L2/R2 · F1/F2 = L3/R3 · O = Options · N = Share ·
P = PS · Tab = touchpad.

Credits and work by @manosmoyrtzakis

Link: https://github.com/manos555555/PS5-Suite/releases/tag/v8.0.0

Thx
I read somewhere on Reddit that someone used Chiaki in the following way:

1) PC is connected to PS5 via Wi-Fi.

2)At the same time, PC is connected to internet via a LAN cable.

This person connects remotely to their PC and plays PS5—which is "offline" from the internet—through it.
I wonder if this is theoretically possible with this tool as well... I’d say probably, yes

----

HS2005 said:
For those who wanted to know: https://prosperopatches.com/PPSA34579
Minimum FW: 14.20

View attachment 601064

Nice... that’s exactly what I was talking about earlier. It’s clear that some devs read this forum—I’d like to thank them for that. You guys are the saviors of humanity.

--------

AlphaBravo said:
Wondered why its taken this long to create folders on ps5 home screen that helps organise games, homebrew, etc.

https://www.reddit.com/r/PS5_Jailbreak/comments/1xo5e9u/folder_system_for_ps5_complete/

Unless something similar already exists, I think this will be another feature to add to the growing list of update news by @HS2005

Does it still work after restarting the console? In any case, this could allow people to organize their games—for example, if they have them across multiple drives—by using folders like "Disk1," "Disk2," "Games1," "Games2," and so on.

----

AlphaBravo said:
Dev working on releasing a full functioning browser for PS5. Feel like my PC is getting more jealous by the hour

It’s precisely for cases like this that it’s good to have a payload that stops that automatic background recording... after all, there’s no need for your web browsing to be recorded, which just wears out the drive... the same goes for things like video players on the PS5 or emulators

When I’m watching a movie, I don’t need it to be automatically recorded again in the background

ayechief · 2026-11-06T11:59:15+0000

hey, i've been wondering why my disc game dump (game is updated via PatchDL and then dumped via PS5 App Dumper) is not running. Here's the error:

Debug:
Error in game
PPSA01528: 0xa0020318
(SYSTEM_ABNORMAL_TERMINATION_REQUEST)
thread name: eboot.bin

And settings I use in PS5 App Dumper:

and Shadowmount+:

vivastar · 2026-11-06T12:54:32+0000

ExistentialVoid said:
Yes.. i just enable the option in shadowmount settings. To test if the game is using the ampr-emu-ng, when the game launches, there will be an pop-up of debug saying the version of the release

Ok thx I ll retry. I still have version 0.30 not 0.31 showing ..

It does work, just forgot I just changed the default sm+ emus folder and used a custom one. But games running an "older" version wont start so it is really game by game .. or it is just that .31 ..

veggav · 2026-11-06T13:03:58+0000

@HS2005

How does Mario Kart World runs? Worth trying at current development stage?

playerman · 2026-11-06T13:14:01+0000

What is your experience with compressed folder ZSTD?? It say that speed is close to fpkg but the best is to use it external. Anyone tried it already??
https://github.com/quer3q/ps5-dump-forge/releases

https://www.reddit.com/r/PS5_Jailbreak/comments/1xm4xjg/all_that_game_formats_explained_in_one_post/

ExistentialVoid · 2026-11-06T14:16:06+0000

playerman said:
What is your experience with compressed folder ZSTD?? It say that speed is close to fpkg but the best is to use it external. Anyone tried it already??
https://github.com/quer3q/ps5-dump-forge/releases

https://www.reddit.com/r/PS5_Jailbreak/comments/1xm4xjg/all_that_game_formats_explained_in_one_post/

For me, starfield works like slideshow in folder and dont work in ffpkg. Only in exfat format. I think that dont have a best format.. its trial and error, until fpkg release for higher firmwares

HS2005 · 2026-11-06T15:33:23+0000

veggav said:
@HS2005

How does Mario Kart World runs? Worth trying at current development stage?

Well I won't go into every detail of a game. Just tried the latest PC release: https://github.com/Djihads80/Eglantine/releases/tag/branch-oot-optimization-fixes-ea3f96f2

On PS5 still some games run very poor. Don't start or have like 10fps. I'll give it few more days. Not in a hurry.

Post automatically merged: Today at 3:35 PM

Some new homebrew updates I've been using and testing:

garlic-savemgr: https://github.com/earthonion/garlic-savemgr/releases/tag/v1.15-beta12
ps5-dump-forge: https://github.com/quer3q/ps5-dump-forge/releases/tag/v0.5.4
ampr-emu-ng: https://github.com/quer3q/ampr-emu-ng/releases/tag/v0.3.2

KiiWii · 2026-11-06T15:52:57+0000

AceLighting said:
Not sure if its been mentioned theres been an update to Porpoise v4.5.

Look forward to trying the ps move for wii games.

https://github.com/elripalda/Porpoise-Dolphin-Emulator-for-PS5/releases

I tried Super Mario Sunshine on this and it ran like crap.

Bigoroth · 2026-11-06T15:53:30+0000

Hey guys, I know this is more of a PS4 question, but it’s still related to homebrew. Is it possible to convert a game save from one region to another?

I’m working through my backlog and I have a copy of Persona 5 Royal lying around, but the thing is, I’m not sure if I should devote that much time to it since I played the vanilla version back in the day, and if I were to play it now, I’d be using cheats (a 100-hour RPG, yikes). The thing is, I noticed that only the European version has cheats, and my copy is the North American one. Is it possible to change the region of the European version’s save file so I can use it with my US copy? Whether it’s with Apollo or any other tool that already exists

KiiWii · 2026-11-06T15:57:22+0000

SonGoku78 said:
I wanted to give eglantine a try with switch 2 games on my pro so i wanted to ask:
When they talk prod.keys and firmware .nca, are these from my switch 1 which i can dump myself ?
Or is it the same for switch 2 and i would need a dump of those too from an actual switch 2 console ?
FW´s are downloadable, no problem, but are the prod.keys even dumpable on switch 2 ?
Or is the prod.keys file not needed for switch 2 games ?
I didnt read much into it yet.
Thanks

Yeah use NS1 FW 23.0.1 FW and keys. No need for dev keys, just prod and title.

1RickyG · 2026-11-06T16:00:09+0000

So I was having some issues with some games stuttering and hanging when in folder format on usb drive, so I switched to the exfat format and put them on internal drive and they are way more playable that way. They were luckily not that much larger than their folder versions if at all.
on a seperate note, does the PS5 allow usb hubs?

Post automatically merged: Today at 4:09 PM

Bigoroth said:
Hey guys, I know this is more of a PS4 question, but it’s still related to homebrew. Is it possible to convert a game save from one region to another?

I’m working through my backlog and I have a copy of Persona 5 Royal lying around, but the thing is, I’m not sure if I should devote that much time to it since I played the vanilla version back in the day, and if I were to play it now, I’d be using cheats (a 100-hour RPG, yikes). The thing is, I noticed that only the European version has cheats, and my copy is the North American one. Is it possible to change the region of the European version’s save file so I can use it with my US copy? Whether it’s with Apollo or any other tool that already exists

If you are on PS4 you can use the homebrew save tool to accomplish that, check Modded Warfare videos if you need a tutorial, I'm sure there is a video on that. Step wise it looks something like this.
1. Get data to be imported- play the game version you want to bring over and make a save.
2.Get data to be replaced. Make a fake save for the region you are bringing the other data into.
decrypt both save files and take the base file from the region you are importing and replace the game data you are converting for.
3. resign the data to your account.
It's been a while since I used Apollo save tool.

schatzi24 · 2026-11-06T16:48:14+0000

BigOnYa · 2026-11-06T16:59:48+0000

schatzi24 said:

I did see where certain reviewers were getting early access. Is this person a known reviewer?

Post automatically merged: Today at 5:04 PM

BigOnYa said:
I did see where certain reviewers were getting early access. Is this person a known reviewer?

Oh he reported a bug, claimed $20k thru HackerOne, and got early access also?

truemaster · 2026-11-06T17:05:40+0000

ViRGE said:
I probably won't be able to help you with this specific game, but in general it is helpful to anyone else to offer some basic technical details on the console you're working on.

Console type (Fat, Slim, Pro)

Firmware version

Game & game version

Where you are trying (or have tried) to run it from

Checking ProsperoPatches, that game is a FW 5.xx game. Seeing as how you dumped the game yourself, that means you have to be on at least the same firmware. So the need for fakelibs should be limited.

You may be best served by just packing it up in a fPKG (feel free to use a low compression ratio so that it packs up quickly) and seeing what happens. A good number of games simply don't work very well as folder dumps or variations thereof, and need to either be in a specific location and format to work, or require emulation libraries. fPKGs get around both of these issues.

ok some more details ps5 phat launch edition on fw 13.60 y2jb kstuff lite 1.11 latest shadowmount. the game is uncharted legacy of thieves ppsa05684 pal. i cant run fpkg yet. its the only game i have that gimme issues. there are other games that crash on launch but fixed with fakelib. shadowmount said it applies emulators only on them. emulators also applyed to uncharted but fail tryed multiple versions of libSceAmpr.sprx. i pinpoint the issue on eboot.bin cause if i change it from a backported one that obtain elsewhere it works. but i want mine. could this be complete uncopatibility as folder or ffpkg from external? or something is really wrong with the dumped eboot?

SonGoku78 · 2026-11-06T17:18:04+0000

lol, is that an ai picture ? or is that jordy as fat spiderman in the mirroring ?

flopsy · 2026-11-06T17:36:44+0000

KiiWii said:
I tried Super Mario Sunshine on this and it ran like crap.

The recomp worked well for me atleast.

ThePSGuy · 2026-11-06T17:46:30+0000

BigOnYa said:
I did see where certain reviewers were getting early access. Is this person a known reviewer?

Post automatically merged: Today at 5:04 PM

Oh he reported a bug, claimed $20k thru HackerOne, and got early access also?

Probably not, just an edited picture.

I had no grudge against Jordy when he found and reported the HV exploit but now he is getting cringy as hell by nagging the community and I just wish he could shut the fuck up already.

PS5 Hack Status:

Preparing Your Console:

Select Your Jailbreak:

Additional Information:

Warnings:

Archived Information

Well-Known Member

The destroyer of worlds

Well-Known Member

Well-Known Member

PS5 Suite v8.0.0​

Changed — Remote Play is now truly in-process (Windows x64)​

Fixed — stream stability​

Remote Play usage (Windows x64)​

Active Member

Active Member

Well-Known Member

Well-Known Member

Well-Known Member

The destroyer of worlds

Editorial Team

Well-Known Member

Editorial Team

Active Member

Well-Known Member

Has A Very Big

Well-Known Member

Well-Known Member

Beware! Sabotage!

Well-Known Member

Similar threads

Popular threads in this forum

PS5 Suite v8.0.0

Changed — Remote Play is now truly in-process (Windows x64)

Fixed — stream stability

Remote Play usage (Windows x64)