PS5 HACK STATUS:

Recommended FW: 4.03
Highest kernel exploit: 4.51
KEX offsets found: 3.00-4.51
Highest webkit entrypoint: 5.50
Mast1C0re entrypoint: 6.50 (PS2 brew)
BD-JB entrypoint: 7.61
HEN: etaHEN latest HERE
PS5 backup loading: Itemzflow for 3.XX-4.5X HERE
PS4 backup loading: FPKG Enabler 3.XX-4.5X (rest mode & backports work, can crash).
Spoofing: 9.99
(Higher FW games won’t run without backport patch. Also breaks FW detection)
PS5debug released: HERE
PS5 trainers/cheats: Work
PS5 dumper: 3.XX-4.5X works with most games, use Itemzflow
(Dumps need rebuilding/cracking to avoid crashing)
Full chain exploit: Not public (2.XX by FlatZ)
PSN access: NEVER
Latest OFW: 9.20 (24/04/24)
Latest beta OFW: 9.00 b4 (03/03/24)
OFW Updates: HERE
Legit PKG Updates: HERE

PS5 Itemzflow compatibility list:
Recommended hosts:
AL-AZIF WEB HOST:
DNS 1: 165.227.83.145
DNS 2: 192.241.221.79

https://cthugha.thegate.network/
https://ithaqua.thegate.network/

NOMADIC20000 HOST:
DNS 1: 62.210.38.117
(Leave DNS 2 blank)
http://es7in1.site/
https://zecoxao.github.io/ps5jb/
https://ps5jb.pages.dev/
https://sleirsgoevy.github.io/ps4jb2/ps5-403/index.html

PS5 game updates: https://psxpatches.com/

Summarised OFW/Model guide: HERE

Update OFW manually via USB by getting the firmware file from HERE and installing from <USB>:/PS5/UPDATE/PS5UPDATE.PUP

4.51 SYS MD5: 1330b7bf63bf5c93d809b1eb1f4e1f01
4.50 SYS MD5: 74e80b800b90a6d01c4b2a25839b1ff5
4.03 SYS MD5: 3716e4e6e0d223cd94cd4a8e5bd4fb94
4.51 REC MD5: da78ca268da90a963d89b0f45db0f061
4.50 REC MD5: 934bbc448321fdc5b4f6e2984bbe1d1b
4.03 REC MD5: e6dcc800d8d1dcada4f2bcd6e7ff162c

PS5 OFW 3.xx runs PS4 games up to 8.50
PS5 OFW 4.xx runs PS4 games up to 9.00

PS4 backported FPKGs work perfectly on PS5.

To determine your OFW version:
Go to settings > system > console information.

Version string info:
Year.Half (1st/2nd half of the year)-Major Version No.Minor Version No.Extended info-Further Info.Retail/Debug

21.02-04.03.00.00-00.00.00.0.1

First BD-J + Kernel access exploit provided by Sleirsgoevy (29/9/22)

Note: Though there are three USERLAND exploits and one KERNEL exploit, there are no public HYPERVISOR exploits available to complete the full exploit chain. A hypervisor exploit was rumoured to be held in private that only works on <3.00 firmware, and recently Flatz confirmed he has developed his own 2.50 HV exploit (kept private) which was chained from a PS4 save game, and has successfully dumped PlayStation Secure Processor (27/07/23).

Spoiler: Hacking Timeline

As of August 4th 2022: We can now install PS4/PS5 PKG games and updates (and by extension FPKGs) however official PKGs cannot be run unless you legitimately owned them previously digitally and have a licence for them on your current console, or if you own the disc (for update pkgs).

As of October 6th PS4 FPKG can be played on 4.03 OFW thanks to Sliersgoevy FPKG enabler!

Payload: https://gbatemp.net/download/4-03-fpkg-enabler-hen.38248/

As of October 21st PS4 FPKG can be played on 4.50 thanks to cheburek3000 porting offsets.

Payload: https://gbatemp.net/download/4-50-fpkg-enabler-hen.38279/

As of October 25th theflow0 fixes BD-J path traversal and native code execution for 7.61
https://x.com/theflow0/status/1717088032031982066?s=46&t=PIYQV4jmWEyCbVfx3Nx26g

As of November 4th ktuff is fixed for 4.51:

Payload: https://gbatemp.net/download/fpkg-enabler-4-51-hen.38306/

Nov 7th PS5 backups loaded via Itemzflow by Lightningmodz and Echostretch. Fully decrypted dumps require system files bundled into them in order to run without crashing with Libhijacker (no hen required), details here: https://gbatemp.net/threads/ps5-exploit-guide.613891/page-109#post-10290677

As of November 30th ps5debug has been released by SiSTR0: https://github.com/GoldHEN/ps5debug
Mirror: https://gbatemp.net/download/ps5debug.38333/

Dec 1st: first PS5 trainer (Dark Souls) is completed ready for the imminent release of REAPER Multi Trainer II by CTN.

Dec 25th: PS5 back up loading via ITEMZFLOW now released: https://pkg-zone.com/details/ITEM00001

As of Jan 2nd 2024 Sleirsgoevy has ported K-Stuff offsets for 3.xx firmwares.

As of Jan 4th 2024 LM had added 3.XX Kstuff to Itemzflow meaning 3.XX-4.51 is now supported for PS4/PS5 backups and dumping.

1: Never enable IDU mode.
If you do you will need to enter staff mode by holding L1 + L2 and tapping this combo: circle, cross, square, triangle, right D-Pad. Release L1 + L2 and you can access settings to exit IDU.

2: Try to stay on the lowest FW possible and wait it out for hacks.

If you are on 1.XX-2.XX do not update at all, it may take years but HV exploit exists in private for this firmware range.
If you are on 3.XX-4.02: the advice is to update to 4.03, but don’t be tempted to update to 4.51 yet.

3: PS5 FPKGs won’t work as HEN and HV/kernel patches do not publicly exist for PS5 content yet.

4: Installing legit game PKGs you do not own will not work, even if spoofed.

5: If you get stuck in a boot loop at the PS logo, this means the SNVS is corrupted (if hash check fails on boot this causes a “soft brick”).

It’s not “bricked”, just reinstall your current firmware RECOVERY PUP in safe mode!

USB: PS5 > UPDATE > PS5UPDATE.PUP

WEBKIT EXPLOIT:
Webkit > Kernel exploit chain for 3.00-4.51 via SpectreDev & ChendoChap:
https://github.com/Cryptogenic/PS5-4.03-Kernel-Exploit

https://github.com/ChendoChap/PS5-IPV6-Kernel-Exploit/tree/wip_branch

4.03 only: https://sleirsgoevy.github.io/ps4jb2/ps5-403/index.html

BD-JB EXPLOIT:
BD-JB > Kernel exploit chain for 4.51 via Sleirsgoevy:
https://github.com/sleirsgoevy/bd-jb/commit/159253464afde59c3007a706210bec65b91f38f3

PS2 CLASSICS EXPLOIT:
PS2 Classics > Userland via CTurt:
(Implementation by McCaulay)

Note: this is currently limited to swapping the loaded PS2 iso, or loading PS2 elf homebrew on PS5 (or PS4) for emulators or basic PS2 brew.

Spoiler: Mast1c0re files + links

Mast1c0re PS2 exploit for PS2 homebrew:
https://cturt.github.io/mast1c0re.html

Mast1c0re part 2:
https://cturt.github.io/mast1c0re-2.html

Mast1c0re payload framework:
https://github.com/McCaulay/mast1c0re

Okrager save game exploit generator for Okage:
https://github.com/McCaulay/okrager

Mast1c0re payloader TCP Client GUI for PS5 6.50:
https://github.com/Master-s/PS4-PS5-Mast1c0re-Payloader/releases

TCP network ISO loader:
https://github.com/McCaulay/mast1c0re-ps2-network-elf-loader/releases

ExFat USB ISO loader:
https://github.com/McCaulay/mast1c0re-ps2-usb-game-loader/releases

Spoiler: PS5 Payloads

4.03 PAYLOADS:
PS5 self dumper (Sleirsgoevy):
https://github.com/sleirsgoevy/ps4jb-payloads/tree/bd-jb/ps5-self-dumper

PS4 FPKG Enabler (Sleirsgoevy):
https://gbatemp.net/download/4-03-fpkg-enabler-hen.38248/

4.5X PAYLOADS:
(Coming soon)

MISC PAYLOADS + TOOLS:
PS5 version display payload by SiSTR0 (compiled by Logic-68):
https://github.com/logic-68/Portage_PS5Version_Mast1c0re/releases/tag/V1.0.0

Libhijacker (by Astrelsky):
https://github.com/astrelsky/libhijacker

60 FPS patches for Libhijacker (by illusion0001):
https://github.com/illusion0001/libhijacker

Console/exploit information:

PS5 SDK REPO:
https://github.com/PS5Dev

PS5 factory mode PUP installation path:
/usb/PROSPERO/UPDATE/PROSPEROUPDATE.PUP

You can install free/demo PKGS (legit pkgs) via debug pkg installer, providing you have all the files/json/licences required.

(Astro’s Playroom has no licences and can be installed and played from official pkgs and update up to 1.60)

Spoiler: General PS5 exploit Information

https://github.com/TheOfficialFloW/Presentations/blob/master/2022-hardwear-io-bd-jb.pdf

https://github.com/sleirsgoevy/bd-jb

https://github.com/psxdev/bd-jb (NOTE: File listing working up to 5.10)

/System mount payload elf for BD-J:
https://gbatemp.net/download/remount-system-with-write-permissions.37807/

https://github.com/john-tornblom/ps5-payload-sdk

https://github.com/john-tornblom/bdj-sdk/actions/workflows/bdjb.yml

 

[flopsy]

Hello again, sorry if my questions are redundant, but I don't want to do any mistake.
I finally bought a barely used, exploitable PS5, but it is in v. 2.00. (350$ with 2 controllers, good deal I guess)
I'm interested in backup dumping/loading and homebrews.

1- Can you please confirm me if it's a good idea to update to 4.03? (I heard that Itemzflow is compatible with 3.XX).

2- If I stay on 3.XX or 4.03, can I still buy and play recent disc games ? (for example, Avatar). Is there a way to virtually upgrade my PS5 to the highest firmware (like we do on Switch) to make it support all the new features? Is that what etaHEN does?

3 - After disabling automatic updates / IDU, can I safely connect my PS5 to my local network ?

Thank you very much!

cc @noirmaru

1. Upgrade if you dont want to wait for HV exploit for 2.xx which might or might not be released in the future. 3.xx might have bugs 4.03 doesnt but with 4.03-4.51 you can run more dumps.

2. You cant virtually update as on the Switch. Its not what etaHEN does. Jailbreaks and payloads is for homebrew, running ps4 fpkg and ps5 dumps and cheats only. You will only be able to run discs that got released up to the firmware you got. Nothing higher. You can see firmware rquirements for upgrade patches here - https://prosperopatches.com/ - to get an idea of what can run, atleast with latest to earliest update.

3. To be on the safer side you can use Nomadic DNS (see start of thread) to block Sony servers. Or selfhost on a PC or esp-board and keep it offline completely.

I hope I answered correctly.

 

[br0ke23]

1+2 Yes 4.03 is good but lower can go as well. Just note that not many recent games will work as they require higher firmware. But expect backports in the future just like on PS4. Most likely there will be higher firmware jb as well to go forward on this matter

3. You can be safe by disabling updates yes. Other ways possible as well

 

[xem]

@flopsy @br0ke23 thank you very much for your answers!

1 - Can you please tell me what HV mean (the HV thing that might or might not get released for 2.XX) and what it does?

2 - To upgrade to 4.03, I should use the "OFW 4.03", not the "recovery firmware", right?

3 - On 4.03, if I understood correctly, I can install PS4 backups too. Is it Itemzflow for PS5 that can help me do it or another tool? Any idea if PSVR and PSVR2 are also supported with this firmware?

Thanks, have a nice week-end

 

[noirmaru]

@flopsy @br0ke23 thank you very much for your answers!



Thanks, have a nice week-end

HV means hypervisor.

Yes, you want the regular 4.03 - not the recovery.

Yes, you can play almost all PS4 backups. The etahen payload enables the debug menu and you can install .fpkg that way. You will however want to install itemzflow to make use of PS5 backups and it has a more flexible PS4 fpkg installer as well.

 

[KiiWii]

Updated my Libhijacker fork to support enabling patches from config file and adding additional titleID to framerate unlocker list in 1.152.https://t.co/IPwzFInBvX

— illusion (@illusion0002) February 24, 2024

 

[KiiWii]

@xem PSVR should be supported, PSVR2 remains unknown.

 

[noirmaru]

1761264671057645700

This looks awesome. Much needed configuration options!

 

[Adam512]

I'm curious myself if there will ever be something for 2.XX, so far it looks like no. I'm still thinking about buying a PS6 on release day even though we've seen what a reward it is for people who bought a PS5 on release day and are patiently waiting.

The PS5 Pro is a very small increase in performance and I don't really care.

In PS5 USB speed is 10Gbps... PCIe4.0 nvme ssd reaches around 7Gbps. So maybe it is theoretically better to buy a PCIe5.0 nvme SSD and use it via USB (special dock for PCIe5.0 to USB), then the speed could be around 10Gbps? What do you think about it? If the PS5 had a slightly faster USB, it could of course be more. Hopefully Sony will learn from their big mistakes and put a removable internal drive in the next PS6, as well as faster USB (at least 40 Gbps which will be the standard USB protocol at that time).

 

[flopsy]

@flopsy @br0ke23 thank you very much for your answers!

1 - Can you please tell me what HV mean (the HV thing that might or might not get released for 2.XX) and what it does?

2 - To upgrade to 4.03, I should use the "OFW 4.03", not the "recovery firmware", right?

3 - On 4.03, if I understood correctly, I can install PS4 backups too. Is it Itemzflow for PS5 that can help me do it or another tool? Any idea if PSVR and PSVR2 are also supported with this firmware?

Thanks, have a nice week-end

A HV exploit means it gets access to other parts of the system and could accomplish more. Conparable to what we have on the PS4. Nothings been released publicly sofar and if it ever will it could take years.

 

[noirmaru]

In PS5 USB speed is 10Gbps... PCIe4.0 nvme ssd reaches around 7Gbps.

You are confusing gigabits and gigabytes.

 

[Adam512]

You are confusing gigabits and gigabytes.

probably yes, so could you please clarify so I can be smarter? Thank you

 

[noirmaru]

probably yes, so could you please clarify so I can be smarter? Thank you

Ok, will try to break it down. To start with the obvious, 1 byte is made up 8 bits. 1 gigabyte is made up of 8 gigabits and so on.

USB theoretical maximum throughput is normally given in Gbps (gigabits per second) while SSD are normally given in MBs (megabytes per second).

This boils down to marketing, but is based upon historical precedence with networking vs storage. They are convertible units.

The PS5 is advertised as having 10Gbps USB ports. A samsung 990 pro nvme is advertised as having 7450MBs read and 6900MBs (megabytes per second) or 59.6Gbps read and 55.2Gbps write (gigabits per second).

PCIE 4.0 has maximum the throughput of 8000MBs (megabytes per second) or 64Gbps (gigabits per second) when using 16 lanes.

For PS5 to make use of 10Gbps, you need a USB gen2x2 nvme adapter that is capable of 20Gbps using 2 lanes, but on the PS5 will use 1 lane, and achieve 10Gbps.

Most nvme USB adapter will not go past 5Gbps on the PS5 for same reason, that only 1 lane is available per USB port and they normally have a maximum speed of 10Gbps using 2 lanes.

Hope that is helpful

 

[schatzi24]

https://x.com/LightningMods_/status/1761439255555915920?s=20

 

[ccfman2004]

You are confusing gigabits and gigabytes.

Add to that where 1GB is supposed to be 1024MB BUT, HDD Makers list GB as 1000MB combined that Windows uses 1024MB to show 1GB so Windows will report a 1TB HDD/SDD as having 939GB and HDD makers wonder why people yell at them for taking away those missing GB. No, it's not lost due to formatting.

 

[KiiWii]

I have also been working on a new Store update to add the option to use the PS5s native background tasks instead of the Store app handling the download and installation process for people locally hosting their own Store CDN https://t.co/FyOzCPr4Kp pic.twitter.com/CUbvHPu5b4

— LM (@LightningMods_) February 24, 2024

 

[lotnybartek]

 

[ccfman2004]

https://wololo.net/2024/02/26/ps5-release-etahen-1-7b-adds-remote-package-install-support/

I can't figure out how to get the web preview. I did it once before but I can't remember how I did it before.

 

[noirmaru]

https://wololo.net/2024/02/26/ps5-release-etahen-1-7b-adds-remote-package-install-support/

I can't figure out how to get the web preview. I did it once before but I can't remember how I did it before.

I think the media tag only works for twitter and the like?

 

[ccfman2004]

I think the media tag only works for twitter and the like?

I did get a web preview with Wololo here once before in this thread but I don't remember how I did it.

 

[KiiWii]

The PS5 HB Store app has been updated change log:

- Added an option to use the PS5s native background tasks (progress will be shown by the home menu and not the app)
- Fixed an issue that would cause the Store app to lag if there were less than 15 items/PKGs
- Fixed an issue… pic.twitter.com/HYvrs4opta

— LM (@LightningMods_) February 25, 2024