PS5 Exploit Guide

br0ke23 · Dec 9, 2024

https://wololo.net/2024/12/09/ps5-console-service-documents-and-tools-leaked/

Horvi · Dec 9, 2024

https://x.com/notnotzecoxao/status/1864342168350900428

Has anyone checked this? I wonder where to put the files and if it is working on low fw as well.

zebrone · Dec 9, 2024

https://x.com/notnotzecoxao/status/1865852818864656631

Whats the password?
Edit: no password needed

madbrainx · Dec 9, 2024

Marc_LFD · Dec 9, 2024

madbrainx said:

Watching it right now... The PS5 update seems useless, no new features, not even simple folders.

KiiWii · Dec 9, 2024

According to sources the LUA entry point IS a viable entry point and is unpatchable.

Be interesting to see if anyone links it to userland then kernel anytime soon.

Wolf85 · Dec 10, 2024

zebrone said:
https://x.com/notnotzecoxao/status/1865852818864656631

Whats the password?
Edit: no password needed

What is this anyway? I couldn't get it to download anything

schatzi24 · Dec 10, 2024

Hope soon more PS5 Backups release on Christmas

ccfman2004 · Dec 10, 2024

Wolf85 said:
What is this anyway? I couldn't get it to download anything

The download didn't work for me either.

zebrone · Dec 10, 2024

Wolf85 said:
What is this anyway? I couldn't get it to download anything

ccfman2004 said:
The download didn't work for me either.

Links are posted in the comment of X....Qiwi

ccfman2004 · Dec 10, 2024

zebrone said:
Links are posted in the comment of X....Qiwi

But the link doesn't work. All that happens are ad ridden pop ups. Nothing actually downloads.

RaZoRNo1 · Dec 10, 2024

KiiWii said:
According to sources the LUA entry point IS a viable entry point and is unpatchable.

Be interesting to see if anyone links it to userland then kernel anytime soon.

Probably a good idea to get the demo somehow and try to copy it to the PS5

KiiWii · Dec 10, 2024

Jogolden SIFA tools for cryptography:
(Potentially useful on PS4/5)

https://github.com/jogolden/sifatools

KiiWii · Dec 10, 2024

https://github.com/Master-s/remote_lua_loader/releases

Remote LUA loader releases, 1.7 adds show/hide command prompt.

1.6 added:
PS5 notification is now working

1.5 added:
Add PS4 & PS5
sigsegv_crash_trigger.lua
streaming_output.lua
hello_world.lua
notification_popup.lua
sigbus_crash_trigger.lua

Current instructions:

Remote lua loader for PS4 and PS5, based on gezine's finding that allows games built with Artemis engine to load arbitrary lua file. The loader is not firmware dependant, and has been successfully tested on PS5 Pro 10.20.
Currently this loader is specific for the following list of games:

Raspberry Cube (CUSA16074)

Aibeya (CUSA17068)

Hamidashi Creative (CUSA27389)

Hamidashi Creative Demo (CUSA27390) - Requires latest firmware to download from PSN

Aikagi Kimi to Issho ni Pack (CUSA16229)

And the payloads:

hello_world.lua - Prints basic information back from the game process - its process id, the base of the eboot, libc and libkernel.

sigsegv_crash_trigger.lua - Triggers a SIGSEGV crash that should be signal handled without crashing the game process.

notification_popup.lua - (Currently PS4-only) Triggers a notification popup with 'Hello World' on the PlayStation.

Usage on jailbroken PS4 with disc version

Play the game for a while until you can create save data

Use Apollo Save Tool to export decrypted save data to USB drive

Copy and paste all files from savedata into USB drive (x:\PS4\APOLLO\id_{YOUR_GAME_CUSA_ID}_savedata), overwriting currently existing save data

Make sure that PLATFORM variable on top of inject.lua is set appropriately

Use Apollo Save Tool to import the new save data from USB drive

Run the game and check if there is a popup from lua loader

Use send_lua.py to send lua file to the loader

If you have a jailbroken PS5 with a non activated account, you can use OffAct from https://github.com/ps5-payload-dev/websrv/releases to offline activate the account and transfer save data with matching account ID using FTP.

Usage on PS5/PS5 Slim/PS5 Pro
Requirements:

PSN-activated PS5/PS5 Slim/PS5 Pro. Can be non-recent offline firmware if was activated in the past.

A Jailbroken PS4 on a firmware version that is earlier or equivilant to the PS5/PS5 Slim/PS5 Pro. Refer to this table. For example, PS4 9.00 can be used to create save game for PS5 >=4.00 but not below that.

Steps:

Find your logged-in PSN account id on the PS5/PS5 Slim/PS5 Pro. Either by going to the PlayStation settings or by using this website.

Take your account ID number (~19 characters long, for PSPlay) and convert it to hex using this website.

JB PS4 -

Play the game for a while until you can create save data.

Connect a USB disk to the PS4.

Use Apollo Save Tool to export decrypted save data to USB drive.

Make sure that PLATFORM variable on top of inject.lua is set appropriately

Copy and paste all files from savedata into USB drive (x:\PS4\APOLLO\id_{YOUR_GAME_CUSA_ID}_savedata), overwriting currently existing save data.

Create new fake offline account.

Use Apollo Save Tool to activate the new fake account using the converted hex account ID from step 2.

Switch to the activated fake account.

Import savedata from USB drive using Apollo Save Tool. (USB Saves -> Select the game -> Copy save game -> Copy to HDD)

Use the PS4 settings menu to export the encrypted save data to the USB drive. (Settings -> Application Saved Data Management -> Saved Data in System Storage -> Copy to USB Storage Device)

PSN-Activated PS5/PS5 Slim/PS5 Pro -

Make sure you're logged-in to the PSN-activated user.

Connect your USB drive to the PS5/PS5 Slim/PS5 Pro.

Use the PS5 settings menu to import the encrypted save data from the USB drive. (Saved Data and Game/App Settings -> Saved Data (PS4) -> Copy or Delete from USB Drive -> Select your game and import)

Run the game and check if there is a popup from lua loader.

Use send_lua.py to send lua file to the loader.

Blythe93 · Dec 10, 2024

Let's say I'd like to buy a PS5 right now. Which is the highest firmware I should go for? Obviously, 4.51 is the obvious choice, but what about 7.61 right now? I've noticed that a bunch of PS5s for somewhat affordable prices have appeared on one of my local marketplace websites so I'm thinking of buying one soon.

Wolf85 · Dec 10, 2024

Blythe93 said:
Let's say I'd like to buy a PS5 right now. Which is the highest firmware I should go for? Obviously, 4.51 is the obvious choice, but what about 7.61 right now? I've noticed that a bunch of PS5s for somewhat affordable prices have appeared on one of my local marketplace websites so I'm thinking of buying one soon.

Let's put it this way, lower is always better simply because you can update later, but you can't go back. I found one on 2.00, was considering updating to 3.00 for the jailbreak before I heard about the Byepervisor exploit so I kept it at 2.00. Later if it happens that 2.30 is the magic firmware for that I can always update.

Blythe93 · Dec 10, 2024

Wolf85 said:
Let's put it this way, lower is always better simply because you can update later, but you can't go back. I found one on 2.00, was considering updating to 3.00 for the jailbreak before I heard about the Byepervisor exploit so I kept it at 2.00. Later if it happens that 2.30 is the magic firmware for that I can always update.

True enough. If only I bought one myself when it released, but during that time I wasn't really interested in PS5 gaming and a few years later when I started collecting consoles and stuff it was a bit too late for that.

KiiWii · Dec 10, 2024

Blythe93 said:
Let's say I'd like to buy a PS5 right now. Which is the highest firmware I should go for? Obviously, 4.51 is the obvious choice, but what about 7.61 right now? I've noticed that a bunch of PS5s for somewhat affordable prices have appeared on one of my local marketplace websites so I'm thinking of buying one soon.

Realistically if you can wait: 4.51 will get hypervisor eventually as well as right now having hen, and can play backups.

I think 4.51 is golden for end users (pirates).

7.61 for backups in future, but no one can say when. 5.xx and 6.xx need addressing first.

2.xx for hypervisor right now, but what has it done for end users so far?

Lower is better and more control is better; but I haven’t seen much evidence of hypervisor exploit providing any use-case advantage yet other than less crackly audio.

Blythe93 · Dec 10, 2024

KiiWii said:
Realistically if you can wait: 4.51 will get hypervisor eventually as well as right now having hen, and can play backups.

I think 4.51 is golden for end users (pirates).

7.61 for backups in future, but no one can say when. 5.xx and 6.xx need addressing first.

2.xx for hypervisor right now, but what has it done for end users so far?

Lower is better and more control is better; but I haven’t seen much evidence of hypervisor exploit providing any use-case advantage yet other than less crackly audio.

Thank you for a detailed reply!

FateNightroad · Dec 10, 2024

KiiWii said:
Realistically if you can wait: 4.51 will get hypervisor eventually as well as right now having hen, and can play backups.

I think 4.51 is golden for end users (pirates).

7.61 for backups in future, but no one can say when. 5.xx and 6.xx need addressing first.

2.xx for hypervisor right now, but what has it done for end users so far?

What we really need right now is a better dumper and backports.

Active Member

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Editorial Team

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Member

Editorial Team

Editorial Team

Usage on jailbroken PS4 with disc version​

Usage on PS5/PS5 Slim/PS5 Pro​

Requirements:​

Steps:​

JB PS4 -​

PSN-Activated PS5/PS5 Slim/PS5 Pro -​

The Treasure Tracker

Well-Known Member

The Treasure Tracker

Editorial Team

The Treasure Tracker

Well-Known Member

Similar threads

Popular threads in this forum

Usage on jailbroken PS4 with disc version

Usage on PS5/PS5 Slim/PS5 Pro

Requirements:

Steps:

JB PS4 -

PSN-Activated PS5/PS5 Slim/PS5 Pro -