PS5 Exploit Guide

BobaFett_UK · Mar 15, 2026

In my experience of ps5 digital licenses it was simple. When I bought the console I had PSN and downloaded GOW as part of my sub. A few months later I had to update the firmware to continue playing that game. In fact for all games downloaded as part of PSN. Now this has got me thinking. Perhaps my statement in the above post may be wrong as my experience is related to digital license as part of a sub. Not a digital licence bought outright. But tbh like the Covid vaccine time will tell if it’s successful or not.

Post automatically merged: Mar 15, 2026

Edit: conspiracy theory…

Surely Sony are keeping tabs on the jailbreak scene and surely they know about SWRR being a userland exploit. So why have they not pulled the game from the digital catalog? Is it a case of hey guys download that game and make a lot of extra revenue for us only to find out it won’t work further down the road? Something is a bit fishy here… You all know it. It can’t be this easy? Surely not?

Theone5000 · Mar 15, 2026

BobaFett_UK said:
i think i will leave mine on 11.60 with a paired bd drive already
The force moves in mysterious ways

Post automatically merged: Mar 15, 2026

Been doing some testing this morning with Dr YenYen and Mr Onion

Garlic Save Manager is now v 1.6

https://github.com/earthonion/garlic-savemgr/releases/tag/v1.6

Nice. Keep it up. There just so mush more to test and discover.

Post automatically merged: Mar 15, 2026

BobaFett_UK said:
Surely Sony are keeping tabs on the jailbreak scene and surely they know about SWRR being a userland exploit. So why have they not pulled the game from the digital catalog? Is it a case of hey guys download that game and make a lot of extra revenue for us only to find out it won’t work further down the road? Something is a bit fishy here… You all know it. It can’t be this easy? Surely not?

I've read that Sony generally focuses system software updates on patching kernel-level or OS-level security vulnerabilities, rather than actively patching third-party apps. If you submit a hack for a app. It's usually not awarded.

Sony's PlayStation Bug Bounty Program policy on HackerOne states that software published by third-party entities, including games and applications, is explicitly out-of-scope for their bounty rewards. While reports are accepted, they are typically passed to the third-party developer for resolution.

KiiWii · Mar 15, 2026

Rasa39 · Mar 15, 2026

lostgem said:
Updated my PS5 from 6.02 to 9.20. Jailbreak works fine and other games are showing up, but Itemzflow finds Dragon's Dogma v3.0 during the scan and just won't add it.

I mean I know I've been trying to get v3 to work, but is it worth updating? Each to their own of course but I thought that 6.xx was looking to be the next "golden fw" for ps5 no?

Like wasn't there something about a potential hypervisor exploit, or a straight up bypass or something that would work up to 6.50?

Also how are people using itemzflow for ps5 games? I know that might sound silly, but not a single ps5 dump shows up there for me. I just use the webman menu in etaHEN if shadowmount is having issues picking it up, and place the games in the "etahen/games" folder.

ArgonUK · Mar 15, 2026

Hi guys,

I got multiple PS5 Pro 12.40 and PS4 Pro13.02 consoles under the same PSN account. I have the SW:Racer revenge installed on one of the PS4 Pro (13.02).

What is the easiest way to copy this game across multiple consoles offline? It is shame that Sony doesn't have a copy function.

Shall I move The game to the external USB drive and clone the drive to obtain multiple copies of the game, so then they can be moved to different consoles internal HDD or SSD?

lostgem · Mar 15, 2026

Rasa39 said:
I mean I know I've been trying to get v3 to work, but is it worth updating? Each to their own of course but I thought that 6.xx was looking to be the next "golden fw" for ps5 no?

Like wasn't there something about a potential hypervisor exploit, or a straight up bypass or something that would work up to 6.50?

Also how are people using itemzflow for ps5 games? I know that might sound silly, but not a single ps5 dump shows up there for me. I just use the webman in etaHEN if shadowmount isn't having issues picking it up, and place the games in the "etahen/games" folder.

Thanks for the advice, it worked perfectly.

KiiWii · Mar 15, 2026

I might actually try stuff on 4.5x

Rasa39 · Mar 15, 2026

I still think it's crazy how bd-jb can get re-enabled on higher firmwares to an extent. Yeah you need a jailbreak method to do so but still.

It reminds me of how the DS flashcarts could be re-enabled on 3DS, just by using a whitelist from older firmware consoles.

I wonder if any of that bd-jb info can be preserved for a backup method. Or perhaps that thing with the drive cloning/imaging?

MohammedQ8 · Mar 15, 2026

I bought the digital version of starwars rr on ps5 so … should I formate and update my hacked ps5 to 12.70 and add my account and activate it and wait??

It is the same account on hacked ps4 to modify the save file …. It looks like we can modify save files on website now no need for hacked ps4 right?

BobaFett_UK · Mar 15, 2026

Garlic save manager development is very fluid at the moment so just be aware of that... it's up v1.61b at the moment.... Jump onto discord if you want to be part of the testing

MohammedQ8 · Mar 15, 2026

I hope we can use it the system backup in the future

Rasa39 · Mar 15, 2026

BobaFett_UK said:
Garlic save manager development is very fluid at the moment so just be aware of that... it's up v1.61b at the moment.... Jump onto discord if you want to be part of the testing

I've only used it once to grab a ps5 save. I was amazed how easy it was to use the .elf through homebrew launcher. I haven't tried to resign or anything like that though, just wanted to snoop on my decrypted ps5 saves lol

It's such a cool project too with how anyone can volunteer if they want, or just have it for local use. It's a a brilliant bit of kit.

MohammedQ8 said:
I hope we can use it the system backup in the future

If it's anything like the PS4 with the syscon and revert mods, then maybe it'll happen. That's assuming the ps5 handles licenses in the same way. So you can change fw or write to the system after patching the syscon and NORflash to retain the section that holds the licenses, thus keeping them valid.

Maybe with hypervisor gone? But hey, only time will tell (and it seems like a lot of work).

KiiWii · Mar 15, 2026

POC for 2.00 OFW only rn:

https://github.com/cragson/a53-code-exec

Proof of concept for code execution on the PS5's a53. Can be used to disable/defeat the Hypervisor till 5.00 (unimplemented).

Currently relies on DECI5S / sdbgp Protocol for read/write on a53 but can be done also from x86 (credits: flat_z).

DON'T BRICK YOUR CONSOLE BY WRITING TO SOMEWHERE YOU DON'T KNOW ABOUT!

ThePSGuy · Mar 15, 2026

Can anyone actually explain to me what is left to be released to have a fully working JB (capable of running backups and all that suff) for systems running on 12.00?

Now that Luacore 2.0 is released and there is a supposedly kernel exploit for that firmware (is it even public at that point?), why don’t I see videos or feedback of people exploiting their 12.00 system?

Is it because of the extremely rare Star Wars game being the entry point which make it irrelevant for most people at the moment or is it because something else missing to have a complete JB?

Theone5000 · Mar 15, 2026

KiiWii said:
POC for 2.00 OFW only rn:

https://github.com/cragson/a53-code-exec

Proof of concept for code execution on the PS5's a53. Can be used to disable/defeat the Hypervisor till 5.00 (unimplemented).

Currently relies on DECI5S / sdbgp Protocol for read/write on a53 but can be done also from x86 (credits: flat_z).

DON'T BRICK YOUR CONSOLE BY WRITING TO SOMEWHERE YOU DON'T KNOW ABOUT!

Just wanted to mention this as well. Good to follow for now.

Post automatically merged: Mar 15, 2026

BobaFett_UK said:
Garlic save manager development is very fluid at the moment so just be aware of that... it's up v1.61b at the moment.... Jump onto discord if you want to be part of the testing

Hehe. Even b2 now: https://github.com/earthonion/garlic-savemgr/actions/runs/23115420162

worm28 · Mar 15, 2026

I couldnt get garlic-savemanager to work on my ps5 but this worked 100% got all my ps4 saves transfered to my ps5 finally https://garlicsaves.com/login

Theone5000 · Mar 15, 2026

worm28 said:
I couldnt get garlic-savemanager to work on my ps5 but this worked 100% got all my ps4 saves transfered to my ps5 finally https://garlicsaves.com/login

So what's the issue you can't use this?

When booting and JB the PS5 put the garlic-savemgr.elf file in the

Code:

/data/ps5_autoloader/

folder. Latest version: https://github.com/earthonion/garlic-savemgr/actions/runs/23115420162

After it's loaded. Go to your IP and port number: 8082 in any browser. I use Chrome.
For example:

Code:

http://192.168.2.208:8082/

I'm loading etaHEN as well. Just FYI. My autoload.txt file:

Code:

#etaHEN-2.5B.bin
etaHEN-2.6B.bin
garlic-savemgr.elf
garlic-worker-ps5.elf

Post automatically merged: Mar 15, 2026

marios096 said:
Yup there for all the game saves and per save in each game

There's a delete function now. You have to right click on a file. This is the most logical step, also from a dev perspective.

yonasz · Mar 15, 2026

ThePSGuy said:
Can anyone actually explain to me what is left to be released to have a fully working JB (capable of running backups and all that suff) for systems running on 12.00?

Now that Luacore 2.0 is released and there is a supposedly kernel exploit for that firmware (is it even public at that point?), why don’t I see videos or feedback of people exploiting their 12.00 system?

Is it because of the extremely rare Star Wars game being the entry point which make it irrelevant for most people at the moment or is it because something else missing to have a complete JB?

Someone have to chain luac0re with kernel exploit and then you have to wait for kstuff support

BobaFett_UK · Mar 15, 2026

I actually load garlic via the plugins and not thru my autoloader. That way I can keep the boot up much more clean.

KiiWii · Mar 15, 2026

Fail0verflow:

“Method we used (>5 years ago, now) on ps5 to fiddle with mp4 and hv memory: github.com/fail0verflow/p…
hope it helps for linux!”

PS5 Hack Status:

Preparing Your Console:

Select Your Jailbreak:

Additional Information:

Warnings:

Archived Information

Well-Known Member

The destroyer of worlds

Editorial Team

Pervert Deluxe

Well-Known Member

New Member

Editorial Team

Pervert Deluxe

Well-Known Member

Attachments

Well-Known Member

Well-Known Member

Attachments

Pervert Deluxe

Editorial Team

Well-Known Member

The destroyer of worlds

Well-Known Member

The destroyer of worlds

Well-Known Member

Well-Known Member

Editorial Team

Similar threads

Popular threads in this forum