Tutorial  Updated

PS5 Exploit Guide

PS5 Hack Status:


FW Ranges:
2.XX = HEN+Kstuff+HV = PS4/5 backups, possible keys exploit (WebKit: 2.50 best / 2.7X max)
3.XX = HEN+Kstuff+HV+Linux = PS4/5 backups, possible keys exploit (WK/BDJB/LUA: 3.20 best / 3.21 max)
4.XX = HEN+Kstuff+HV+Linux = PS4/5 backups (WK/Y2JB/BDJB/LUA: 4.50 best / 4.51 max)
5.XX = HEN+Kstuff+HV+Linux = PS4/5 backups (
WK/Y2JB/BDJB/LUA: 5.50 best + max)

6.XX = HEN+Kstuff = PS4/5 backups, HV+Linux for 6.02 max (Y2JB/BDJB/LUA: 6.50 best + max)
7.XX = HEN+Kstuff = PS4/5 backups, no HV (
Y2JB/BDJB/LUA: 7.61 best + max)
8.XX-10.01 = HEN+ Kstuff = PS4/5 backups, no HV (Y2JB/LUA)
10.20-12.00 = KEX + Kstuff = PS4/5 backups, no HV (
LUA)
12.02-12.70 = KEX (
P2JB/SWRR)
13.XX = No KEX/HEN/Kstuff/HV (LUA)

NOTE: Recommended firmware is subjective. Staying low is always suggested first & foremost. It is not recommended to update too many major versions (e.g., 4.xx to 5.xx or 7.xx to 8.xx) because you should remain low unless all you want is backups.

DO NOT UPDATE OVER 12.00!! P2JB can take over 3 hrs to trigger an exploit.


Hypervisor (HV):
Highest known HV exploit: 6.02
Highest theoretical HV exploit: 7.XX
Highest implemented HV exploit: 1.00-4.51 (Cragson PS5Hen) / 3.00-6.02 (TheFlow)
*unreleased/unimplemented

Kernel (KEX):
Highest public Release:
12.70
Highest known: 12.70 (P2JB)
UMTX2: 1.00-7.61
Lapse: 1.00-10.01
Poopsploit: 4.XX-12.00
P2JB: X.XX-12.70

Userland (UL):
LUA: 2.00-LATEST (LUA game exploit, chain Lapse up to 10.01)
Y2JB: 4.03-12.60 (YouTube exploit, + Lapse up to 10.01)
NFNH: 4.03-12.XX (Netflix exploit, + Lapse up to 10.01)
YARPE: 4.03-12.XX (Ren'Py exploit, + Lapse up to 10.01)
BD-JB: 1.00-7.61 (Blu Ray exploit + UMTX2, 8.00-12.40 via UN BD JB + Poopsploit)
Webkit: 1.00-5.50 (PSFREE +UMTX2) (up to 13.20 coming soon)
Mast1C0re: 1.00-7.61 (PS2 backups)
LuaC0re: 10.20-12.02 (Star Wars RR: + Poopsploit up to 12.00)

NOTE: A userland entry exploit (UL) chained to kernel exploit (KEX) is required at a bare minimum to exploit your console.

NOTE 2: Since 12.60/13.00 Sony has removed the YouTube and Netflix apps and has added 30 day expirations to downloaded software used for LuaC0re/Mast1C0re/RenPy etc.

Digital consoles will now need a new webkit userland to hack their consoles as of 19/04/2026)


Useful Applications:
Elf loader: 8.00/7.61 HERE (use with BD-J)
Kstuff: 3.00-10.01 (3.00-12.70 soon)
HERE
Kstuff Lite: 3.00-12.70 HERE
Kstuff Toggle: 3.00-12.00 HERE
Dumping: Up to 8.00/7.61 (ItemzFlow / self decryptor) latest HERE
PS5 App Dumper: 3.00-12.00 HERE
Dump Runner: 3.00-12.00 HERE
Dump Installer: 3.00-11.60 HERE
Backporting: Possible (backpork / Porkfolio)
PS4/PS5 DLC: Work with kstuff (on retail disc games)
Homebrew Enabler: etaHEN (3.00-10.01) latest HERE
PS5 Backup Loading: Itemzflow HERE Compatibility list: HERE
PS4 Backup Loading: FPKG Enabler 3.XX-9.XX (rest mode & backports work, can crash).
PS5 Debug: Works
HERE
PS5 Remote Play: Works HERE & HERE
PS5 Trainers/Cheats: Work (Built into itemzFlow)

UART:
HERE
Linux: (3.00-6.02) HERE
Kldload (wip): 3.00-6.50 HERE
Full chain exploit: 1.00-4.51 (byepervisor) HERE (also built into etaHEN up to 2.7X)
PSN access: NEVER
Latest OFW: 13.40 (04/06/26)
Summarised OFW/Model guide: HERE
1.XX-7.61 compatibility list:
HERE
PS5 SDK Repo: HERE
Legit PKG Updates: HERE or HERE
OFW Updates: HERE (history HERE)

Preparing Your Console:


It is recommended to either self-host offline or block these addresses in your router to avoid accidental updates or getting an update nag. Using the DNS method is no longer failsafe, as these are not guaranteed to be running 24/7.


dau01.ps5.update.playstation.net
dbr01.ps5.update.playstation.net
dcn01.ps5.update.playstation.net
deu01.ps5.update.playstation.net
dhk01.ps5.update.playstation.net
djp01.ps5.update.playstation.net
dkr01.ps5.update.playstation.net
dmx01.ps5.update.playstation.net
dru01.ps5.update.playstation.net
dsa01.ps5.update.playstation.net
dtw01.ps5.update.playstation.net
duk01.ps5.update.playstation.net
dus01.ps5.update.playstation.net
fau01.ps5.update.playstation.net
fbr01.ps5.update.playstation.net
fcn01.ps5.update.playstation.net
feu01.ps5.update.playstation.net
fhk01.ps5.update.playstation.net
fjp01.ps5.update.playstation.net
fkr01.ps5.update.playstation.net
fmx01.ps5.update.playstation.net
fru01.ps5.update.playstation.net
fsa01.ps5.update.playstation.net
ftw01.ps5.update.playstation.net
fuk01.ps5.update.playstation.net
fus01.ps5.update.playstation.net
hau01.ps5.update.playstation.net
hbr01.ps5.update.playstation.net
hcn01.ps5.update.playstation.net
heu01.ps5.update.playstation.net
hhk01.ps5.update.playstation.net
hjp01.ps5.update.playstation.net
hkr01.ps5.update.playstation.net
hmx01.ps5.update.playstation.net
hru01.ps5.update.playstation.net
hsa01.ps5.update.playstation.net
htw01.ps5.update.playstation.net
huk01.ps5.update.playstation.net
hus01.ps5.update.playstation.net
sgst.prod.dl.playstation.net
gs2.ww.prod.dl.playstation.net

Alternative DNS IP:
DNS 1: 172.245.146.114
(Leave DNS 2 blank)

To determine your OFW version:
Go to settings > system > console information.

Version string info:
Year.Half (1st/2nd half of the year)-Major Version No.Minor Version No.Extended info-Further Info.Retail/Debug

21.02-04.03.00.00-00.00.00.0.1

It is recommended to keep your console as low as possible to have access to better jailbreak stability and features. Stay as low as possible within the "Golden" firmware brackets that apply to your current firmware.

Current Examples:

2.00 could be updated to 2.50 maximum to retain Webkit/BD-JB/LUA HV + KEX + HEN.
4.00 could be updated to 4.51 maximum for WebKit/BD-JB/LUA + KEX + HEN + potential HV exploits.
5.00 could be updated to 5.50 maximum for WebKit/BD-JB/LUA + KEX + HEN.
6.XX-7.XX could be updated to 7.61 maximum for HEN using only BD-JB or LUA.
Digital/Pro users on 6.XX-LATEST cannot use BDJB or LUA without an activated console. Wekbit does not go beyond 5.50 for now.
Digital/Pro users or Disc console users on 8.XX-LATEST should consider waiting or selling/swapping consoles to get a lower firmware.
(No jailbreak is ever guaranteed. No developer is obliged to release anything publicly)

WARNING:

Only update OFW manually via USB by getting the firmware file from HERE and installing from <USB>:/PS5/UPDATE/PS5UPDATE.PUP

SYSTEM UPDATES:

12.00 SYS MD5: 79d3171ec4ef38ca27f8ff36a9940847 (Exploited - No HEN yet)

10.01 SYS MD5: 68a31944c1867bf9643798fd1c14998e (Exploited + HEN)
9.00 SYS MD5: e74ddccd3360941ca24475c13195e031 (Exploited + HEN)
8.00 SYS MD5: 7616128c57581d5e49b42d1b3f308232 (Exploited + HEN)
7.61 SYS MD5: d5eca8b171a8d7df7ba225167f77e645 (Exploited + HEN)

6.50 SYS MD5: 98db854ba47a75dff0cb09355bca9025 (Exploited + HEN)
5.50 SYS MD5: edb3513ec531b2bd28f3a0b52a82a54f Exploited + HEN)
4.51 SYS MD5: 1330b7bf63bf5c93d809b1eb1f4e1f01 (Exploited + HEN)
4.03 SYS MD5: 3716e4e6e0d223cd94cd4a8e5bd4fb94 (Exploited + HEN)

RECOVERY UPDATES (wipes HDD):
12.00 REC MD5: f993e4c35ed6659b516346941980de4b (Exploited - no HEN yet)

10.01 REC MD5: 5202be086fc726d881f722d46e4486c6 (Exploited + HEN)
9.00 REC MD5: 6fbbda82c325bb5d6ec0717c2223b5c0 (Exploited + HEN)
8.00 REC MD5: 6cbb7a2fa2ace926202bd6e71304fb06 (Exploited + HEN)
7.61 REC MD5: 932f24e934723050fe49561b67e95226 (Exploited + HEN)
6.50 REC MD5: 4305223c12bd6dda9b944c0ee49c94c0 (Exploited + HEN)
5.50 REC MD5: c939ac8b37e07bbc129816a61002d30a (Exploited + HEN)
4.51 REC MD5: da78ca268da90a963d89b0f45db0f061 (Exploited + HEN)
4.03 REC MD5: e6dcc800d8d1dcada4f2bcd6e7ff162c (Exploited + HEN)

PS5 factory mode PUP installation path:

/usb/PROSPERO/UPDATE/PROSPEROUPDATE.PUP

Select Your Jailbreak:


WEBKIT (1.00-5.50):BD-JB 1.00-7.61:LUA (2.00-LATEST):Mast1c0re (2.00-7.61):Y2JB (4.03-10.01):NFNH (4.03-10.01):YARPE (4.03-10.01):LuaC0re (12.00 REQUIRES SWRR):BD UN JB (REQUIRES JB'D CONSOLE):


  1. PSFREE 1.XX-5.XX: https://github.com/kmeps4/PSFree
    Recommended host: https://zecoxao.github.io/luasauce/ (UMTX2 + Webkit for 1.XX-5.XX)

    Recommended WebKit hosts:
    https://zecoxao.github.io/luasauce/
    (UTMX2 with Lua and WebKit for 1.xx-5.xx)
    https://zecoxao.github.io/umtx/ or https://es7in1.site/
    (UMTX 2 exploit works on 3.00-5.50 with PSFREE WebKit)

    Alternative hosts:
    https://zecoxao.github.io/ps5jb/

    https://ps5jb.pages.dev/
    https://sleirsgoevy.github.io/ps4jb2/ps5-403/index.html

  2. You will need a BD dive paired to your Slim/Pro console, or an OG Phat model on 1.00-7.61 to run this exploit.

    Viktorious AIO Auto BD-JB ISO for 4.XX-7.61: https://github.com/Viktorious-x/ps5-bdjb-modified-ISOs/releases
    (Alternative: UMTX Kernel exploit 7.61 JAR loader by Hammer83: https://github.com/hammer-83/ps5-jar-loader/releases)

    Burn ISO to a blank BD-R or BD-RE, put it into your console, and click on the [DISC PLAYER] icon.
    Highlight [PIPELINE RUNNER] then click option 2 [Normaljailbreak-etaHEN-UMTX1.pipe] to auto load etaHEN ready for ItemzFlow.
    Debug settings will be loaded, and the package installer can be found under [SETTINGS] > [DEBUG SETTINGS].
    ELF Loader will be running on your PS5 IP: port 9021


  3. Important:
    Up to 10.01 has a kernel exploit + HEN
    11.XX-12.70 has a kernel exploit but no HEN yet.
    LUA entry point works on the latest OFW, but there is no kernel or HEN yet.
    (A compatible PS4 game is required to launch the exploit on PS5. See below)

    Your PS5 console must be activated to use save copying for PS4 games.

    1. Insert your game disc and, as soon as possible, make a save file within it.
    2. Copy the save files to USB, go to [SETTINGS] > [STORAGE] > [CONSOLE STORAGE] > [SAVE DATA] > [PS4 GAMES] > select the game save and copy to a USB drive.
    3. On PC, using a Google Drive account, make a new folder with the GAME ID of your game, and upload the savedata & savedata.bin files to that folder.
    4. Share the folder, set it to editor mode, share with anyone, and click "copy the link".
    5. Join the HTOS Discord group: HERE type "/decrypt", select "FALSE" for including SCE_SYS, paste or type in the Google Drive link, and press enter. The bot should begin mounting your save. (If it doesn't, paste in the link again.)
    6. Click "ENCRYPTED" to remove the Sony PFS layer. Download the generated files and extract the folder to your desktop (you should have 4 files in there and be named dec_savedata_CUSA[GAME ID]).
    7. Using REMOTE LUA LOADER, open the savedata folder, copy the 20 files within into your encrypted save folder on your desktop.
    8. Upload the encrypted save folder (now with 24 files in) to your Google Drive. It should be named "dec_savedata_CUSA[GAME ID]" where GAME ID is your games 5 digit number, and set it to editor mode, share with anyone, and then click "copy the link".
    9. Go back to the HTOS discord server, and type "/encrypt", hit "FALSE" for uploading individually, and "FALSE" to include SCE_SYS. Finally, hit shared_gd_link and paste in your link to the original save (4 files) folder. (If it doesn't, paste in the link again.)
    10. When this is done, paste the link to the decrypted save (24 files) folder, and the bot will encrypt the files.
    11. Resign the files by typing "/resign" followed by your account name on the console, or PSN ID associated with that account if using the latest OFW.
    12. Download the resigned files, extract the files to your USB drive and overwrite them into the savedata folder on your USB or external drive.
    13. Copy the saves back to your console [SETTINGS] > [SAVE DATA AND GAME/APP SETTINGS] > [SAVE DATA PS4] > [COPY OR DELETE FROM USB] > [COPY TO CONSOLE STORAGE] > select your game save folder from the USB drive and copy/overwrite old save data.
    14. Load LUA game again, and you should see the LUA LOADER screen.
    15. You can use "SEND_LUA.PY" to send the UMTX files to the loader.
    (NOTE: Some games require manual loading of save game)

    On firmware up to 7.61, you can now load UMTX/2 followed by etaHEN by sending the files to your console IP on PORT 9026.
    On firmware 8.00-LATEST, you can connect with the REMOTE LUA LOADER APP to send debug notifications or FTP on port 1337.

    LUA Loader: HERE or HERE

    Auto LUA Loader Fork: HERE

    Compatible LUA games:
    Aerial Life (CUSA17122)
    Aibeya (CUSA17068)
    Aikagi 2 (CUSA19556)
    Aikagi Kimi to Issho ni Pack (CUSA16229)
    Aikano Yukizora no Triangle (CUSA19370)
    Boku to Nurse no Kenshuu Nisshi (CUSA12049)
    Boku to Joi no Shinsatsu Nisshi (CUSA18107)
    Fuyu Kiss (CUSA29745)
    Hamidashi Creative (CUSA27389)
    Hamidashi Creative Demo (CUSA27390 requires the latest OFW to download from PSN)
    Haruoto Alice (CUSA14324)
    IxSHE Tell (CUSA17112)
    IxSHE Tell Demo (CUSA17126)
    Jinki Resurrection (CUSA25179)
    Jinki Resurrection Demo (CUSA25180 requires the latest OFW to download from PSN)
    Maid-san no Iru Kurashi (CUSA18106)
    Nora Princess and Stray Cat Heart HD (CUSA13303: Rename save9999.dat into nora_01.dat)
    Nora Princess and Strat Cat Heart 2 (CUSA13586)
    Raspberry Cube (CUSA16074)
    Winter Guest (CUSA11977)

    WARNING: using demos is free but can become corrupt, and you cannot upgrade your internal HDD either. If you lose the demo you can no longer use the exploit.Disc recommended.

    Incompatible LUA games:

    Dokyusei Remake Csver (CUSA47117)
    Dōkyūsei: Bangin' Summer - Home Edition Demo (CUSA47132)
    Kiss Trilogy (CUSA19341)
    Love Clear Demo (CUSA18109)
    Mikagami Sumika no Seifuku Katsudou (CUSA11481)
    Sen no Hatou, Arazone no Hime (CUSA09647)
    Tonari ni Kanojo no Iru Shiawase: Two Farce (CUSA09825)
    Tonari ni Kanojo no Iru Shiawase Summer Surprise (CUSA18998)

  4. PS2 Classics > Userland via CTurt:
    (Implementation by McCaulay)
    Note: this is currently limited to swapping the loaded PS2 iso, or loading PS2 elf homebrew on PS5 (or PS4) for emulators or basic PS2 brew.

    Mast1c0re PS2 exploit for PS2 homebrew:
    https://cturt.github.io/mast1c0re.html

    Mast1c0re part 2:
    https://cturt.github.io/mast1c0re-2.html

    Mast1c0re payload framework:
    https://github.com/McCaulay/mast1c0re

    Okrager save game exploit generator for Okage:
    https://github.com/McCaulay/okrager

    Mast1c0re payloader TCP Client GUI for PS5 6.50:
    https://github.com/Master-s/PS4-PS5-Mast1c0re-Payloader/releases

    TCP network ISO loader:
    https://github.com/McCaulay/mast1c0re-ps2-network-elf-loader/releases

    ExFat USB ISO loader:
    https://github.com/McCaulay/mast1c0re-ps2-usb-game-loader/releases

  5. coming soon

  6. coming soon

  7. coming soon

  8. coming soon

  9. This method modifies the BD-J stack to allows BDJB to be re-enabled on your higher firmware console up to 12.40.

    This requires your console to be hacked via another method first to gain access to alter the files.
    (For example 12.00 needs SWRR disc to hack it first)

    https://github.com/Gezine/BD-UN-JB

    DO NOT REINSTALL FW, IT WILL WIPE THE PATCH AND LOSE BD-JB


Additional Information:


PS4 GAME INFORMATION:
OFW 1.xx cannot run PS4 games.
OFW 2.xx runs PS4 games up to 8.03

OFW 3.xx runs PS4 games up to 8.52
OFW 4.xx runs PS4 games up to 9.04
OFW 5.xx runs PS4 games up to 9.60
OFW 6.xx runs PS4 games up to 10.50

OFW 7.xx runs PS4 games up to 11.00
OFW 8.xx/9.xx runs PS4 games up to 11.50
OFW 10.xx runs PS4 games up to 12.00

OFW 11.xx runs PS4 games up to 12.50
OFW 12.xx runs PS4 games up to 13.00


(Note: PS4 backported FPKGs also work perfectly on an exploited PS5 with Kstuff)


You can install free/demo PKGS (legit pkgs) via the debug pkg installer, provided you have all the files/json/licences required.
(Astro’s Playroom has no licences and can be installed and played from official pkgs and updated inline with your firmware)

Warnings:


1: Never enable IDU mode.
If you do, you will need to enter staff mode by holding L1 + L2 and tapping this combo: circle, cross, square, triangle, right D-Pad. Release L1 + L2, and you can access settings to exit IDU.

2: Try to stay on the lowest FW possible and wait for hacks on that firmware.

3: PS5 FPKGs do not work. A hack for the A53 processor does not publicly exist to enable installing PS5 content as FPKG/PKG.

4: Installing legit game PKGs you do not own will never work, even if spoofed.

5: If you get stuck in a boot loop at the PS logo, the SNVS is corrupted (if the hash check fails on boot, this causes a “soft brick”). It’s not “bricked”. Simply reinstall your current firmware RECOVERY PUP in safe mode from USB: PS5 > UPDATE > PS5UPDATE.PUP.

Archived Information


 
Last edited by KiiWii,
What madbrainx said. Not sure how's the situation with used PS5 consoles where you live but I was lucky enough to stumble upon a guy that sold me his 5.00 Horizon Forbidden West bundle. He claimed that he opened the console just to check the firmware and, thankfully, he wasn't lying since console arrived in a pretty good condition (outer box sleeve was torn a bit on one side and the game code expired or was already claimed, but everything else was pristine). What I wanted to say is to not limit yourself to the new, unopened consoles and check the used ones as well as you might run into a similar deal. I paid $585 for this one, shipping included, and it was a pretty good deal if you ask me. Good luck!
I got lucky and found an og fat on Facebook marketplace and paid $450 with firmware 2.00. It was still sealed too.
 
LUA Information
The list below is based on information from https://imel.co.jp/activity/

Artemis Engine: Physical PS4 games
. 2017-11-21 CUSA09825 PLJM16086 04.70 02.00 Tonari ni Kanojo no Iru Shiawase ~Two Farce~
. 2017-12-20 CUSA09647 PLJM16072 04.70 02.00 Sen no Hatō, Tsukisome no Kōki
. 2018-02-21 CUSA10679 PLJM16141 04.70 02.00 Azayaka na Irodori no Naka de, Kimi Rashiku*
.
2018-05-23 CUSA11481 PLJM16182 05.00 02.00 Mikagami Sumika no Seifuku Katsudou
. 2018-07-01 CUSA11977 PLJM16209 05.53 02.00 Tonari ni Kanojo no Iru Shiawase ~Winter Guest~
. 2018-08-22 CUSA12049 PLJM16213 05.00 02.00 Boku to Nurse no Kenshuu Nisshi
. 2018-10-25 CUSA13303 PLJM16276 06.02 02.00 Nora to Oujo to Noraneko Heart HD, Noratoto HD
. 2019-02-27 CUSA13586 PLJM16310 06.02 02.00 Nora to Oujo to Noraneko Heart 2, Noratoto 2
. 2019-03-27 CUSA14324 PLJM16346 05.50 02.00 Haruoto Alice * Gram: Snow Drop
. 2019-08-28 CUSA16229 PLJM16466 06.00 02.00 Aikagi Kimi to Issho ni Pack
. 2019-09-19 CUSA16074 PLJM16452 06.00 02.00 Raspberry Cube
. 2020-01-30 CUSA17112 PLJM16515 06.50 02.00 IxSHE Tell

. 2019-10-23 CUSA17122 PLJM16517 06.50 02.00 Aerial Life
. 2019-11-27 CUSA17048 PLJM16507 06.50 02.00 Amamane
. 2019-12-05 CUSA17068 PLJM16513 06.50 02.00 Aibeya
. 2020-01-29 CUSA18107 PLJM16574 06.50 02.00 Boku to Joi no Shinsatsu Nisshi
. 2020-02-26 CUSA18106 PLJM16575 07.00 02.00 Maid-san no Iru Kurashi
. 2020-05-27 CUSA18998 PLJM16623 07.00 02.00 Tonari ni Kanojo no Iru Shiawase ~Summer Surprise~

. 2020-09-23 CUSA19556 PLJM16663 07.00 02.00 Aikagi 2
. 2020-10-29 CUSA19370 PLJM16641 07.00 02.20 Aikano ~Yukizora no Triangle~
. 2020-10-29 CUSA19555 PLJM16664 07.00 02.20 Tonari ni Kanojo no Iru Shiawase ~Curious Queen~
. 2021-02-24 CUSA25179 PLJM16789 07.50 03.00 Jinki Resurrection
. 2021-09-29 CUSA27389 PLJM16841 08.50 04.03 Hamidashi Creative, Hamikuri
. 2021-11-24 CUSA29745 PLJM16928 08.50 04.51 Fuyu Kiss

. 2024-04-17 CUSA45810 PLJM17345 11.00 09.20 Doukyuusei Remake CSver

🟢 = Officially supported
🟠 = Community-confirmed
🔴 = Currently unsupported, untested or unconfirmed

*Offsets for this game is currently only available on RLL forks. CUSA10679
There are three main methods to transfer game saves to a PS5. This is required to jailbreak with Lua.

🟡 1. Jailbroken PS5: requires an already jailbroken PS5 with WebKit, BD-J or one of the two methods listed below. It's most useful if:
  • You want an alternative to Webkit or BD-J,
  • You want to add saves to a new user account, or
  • You want to update existing game saves.
🟠 2. Activated PSN account: To use this method, you must be able to import an encrypted game save (step 8) directly from the PS5’s settings menu. This requires a PSN-activated user account, which can only be activated on the latest firmware. Since firmware 10.20 was released on October 18, 2024, jailbreak is only possible if the account was activated before that date. This is the only method available to jailbreak non-FAT consoles on 8.00-10.01 that are susceptible to losing Blu-ray drive pairing.

🟤3. Console backup restore
(Warning: This method erases all user data on the console and might unpair the Blu-ray drive on some non-FAT models)
This method requires a functional Blu-ray drive in order to jailbreak with current kernel exploits. It's also the only method available to jailbreak any PS5 on 8.00-10.01 lacking either an activated PSN account or a playable Lua-compatible game. It can be performed on these consoles while still keeping access to the Blu-ray drive:
  • FAT consoles on firmware 2.00-10.01 with a Blu-ray drive, or
  • Some Slim consoles on firmware 8.00-10.01 have been reported to work with this method, but more research is needed to safely identify which ones meet this requirement, as some non-Fat consoles have been reported to lose bd pairing after factory resets or drive removals.
Additional Notes:
  • Lua saves can be transferred with methods 2 or 3 to PS5s on 10.20+, but jailbreaking will only be possible once a compatible kernel exploit is released.
  • Master_s9's console backups require fw 5.10+.
  • Regardless of the transfer method, to jailbreak a PS5 with Lua it must have a playable Lua-compatible game (disc or digital) installed.
  • Disc games can be installed on any compatible firmware, as the license is stored on the disc itself. But Lua-compatible digital games can only be installed on the latest firmware.
  • A PS5 on 2.00+ firmware is required to play PS4 games.
  • Some PS4 games released after 2020 may require a higher firmware to run, even if other requirements are met.
__________________________________________
Userland exploit compatibility by firmware
  • up to 5.50: 🟢 WebKit 🔵 BD-J 🟡🟠🟤Lua
  • 6.00- 7.61: 🔴 WebKit 🔵 BD-J 🟡🟠🟤Lua
  • 8.00-10.01: 🔴 WebKit 🔴 BD-J 🟠🟤Lua
🔵 BD-J requires a working Blu-ray drive and a custom Blu-ray disc
🔴 = Currently unsupported.

⚠️ Awaiting userland exploit
The following models currently require a new userland exploit (e.g., a WebKit entrypoint) to chain with UMTX (≤ 7.61) or Lapse (≤ 10.01) kernel exploits:
  • FAT digital consoles on 6.00-10.01 lacking either an activated PSN account or a playable Lua-compatible game,
  • Slim consoles originally shipped with firmware ≤ 7.61 (updated or not to firmware 8.00-10.01) lacking either an activated PSN account or a playable Lua-compatible game, and
  • Pro consoles on firmware ≤ 10.01.
❌ Awaiting kernel exploit
Any console on firmware 10.20 or above can’t be jailbroken yet, as no public kernel exploits are available. However, it’s still possible to run sandboxed Lua scripts, provided you have a Lua-compatible game and the corresponding modified save file installed.
__________________________________________
Firmware compatibility by exploit

Userland:

  • WebKit: ≤ 5.50
  • BD-J: ≤ 7.61
  • Lua: ≤ 11.40
Kernel:
  • IPV6: ≤ 4.51
  • UMTX: ≤ 7.61
  • Lapse: ≤ 10.01
🧰 Requirements:
A Lua-compatible game (physical or digital)
Jailbroken PS5 (or unjailbroken if user account is PSN-activated)
Discord account
Google Drive account
USB drive
PS5 Xplorer
websrv and OffAct (required only if user account is not PSN-activated)
PLK's fork (from GitHub)


🎮 Part 1: Prepare Your Game Save

1. Insert the Lua-compatible game disc (or launch digital version)
2. Install the game (if not already installed)
3. Start the game and create a new save
4. Close the game


💾 Part 2: Copy Game Save to USB

🌐 If your account is PSN-activated (also works with unjailbroken PS5):

5. Go to Settings → Saved Data and Game/App Settings → Saved Data (PS4) → Console Storage
6. Select the save, copy it to the USB drive
7. Skip to Step 15


🔓 If your account is not PSN-activated:

8. Jailbreak your PS5 (using your usual method)
9. Install PS5 Xplorer (if not installed already)
10. Install both homebrew loader and OffAct, and send websrv.elf (see tutorial)
11. Run OffAct, and:

  • If User ID = 0x0000000000000000, set a random one (might need to restart the PS5 and repeat all steps from Step 1)
  • Write the User ID down
12. Plug your USB drive into the PS5
13. Launch PS5 Xplorer
14. Copy the save folder:

  • /user/home/<your_local_account>/savedata/<game_title_ID>
    to:
    /mnt/usb<x>/ (your USB drive)


💻 Part 3: Prepare Save on PC

15. Plug the USB drive into a PC
16. If your account is not PSN-activated, navigate to /<game_title_ID>/ folder and rename:

  • sdimg_savedata
    to:
    savedata
17. Download the 'savedata' folder from PLK's fork, and remove from the extracted folder:
  • ps5_lua_loader/ (folder), and
  • psfree-1.5rc1.7z (file).
18. Upload both folders to your Google Drive:
  • Your original save game: /<game_title_ID>/ (Step 16), and
  • PLK’s savedata folder (from GitHub fork - Step 17).


🤖 Part 4: Use Discord BOT to Encrypt Save

19. On Discord, click "Add Server" and join using the invite link at the bottom of this GitHub page: https://github.com/That-Kidd/ps-bot (under “No jailbroken PS4?” section)
20. In the server, go to #hto channel under –HTOS Save Bot– click the “Get Started” button in the 'PS Bot' message
21. If you used OffAct, in the new thread with your username (created under #hto):

  • Type /store_accountid and select the one from PS Bot
  • Type 0x<user_id_from_Step_11> (account_id prompt)
  • Hit Enter
22. In the same thread with your username (created under #hto):
  • Type /encrypt and select the one from PS Bot
  • Choose "False" twice (both prompts)
  • Hit Enter (leave third prompt empy)
23. In Google Drive:
  • Right-click the uploaded folder:
    • Your original save game: /<game_title_ID>/
  • Select Share → Share
  • Set “General access” → Anyone with the link
  • Copy link, and paste into your Discord thread (Step 22)
24. Wait for the BOT to process ['Resigning Process (Decrypted): Upload savedata'] and repeat Step 23 for PLK’s savedata folder.
25. Wait for the BOT to process and return a Google Drive link (~5–10 minutes): ['Google Drive: Upload complete']
26. Download the processed file and extract it to the USB drive (overwrite files if necessary)


🎮 Part 5: Transfer Modified Save Back to PS5

🌐 If your account is PSN-activated:

27. Plug the USB drive into the PS5 and go to Settings → Saved Data and Game/App Settings → Saved Data (PS4) → USB Drive
28. Select the save and copy it to the Console Storage
29. Skip to Step 35


🔓 If your account is not PSN-activated:

30. On PC, navigate to the extracted folder PS5/SAVEDATA/<user_id>/<game_title_ID>/ and rename:
  • savedata
    to:
    sdimg_savedata
(Note that <user_id> folder in PS5/SAVEDATA must match the id from Step 11. If different repeat all steps from Step 21)

31. Plug the USB drive into your PS5
32. Launch PS5 Xplorer
33. Copy both files from:

  • /mnt/usb<x>/PS5/SAVEDATA/<user_id>/<game_title_ID>/
    to:
    /user/home/<your_local_account>/savedata/<game_title_ID>/ (overwrite files)
34. Close PS5 Xplorer


✅ Final Step: Test

35. Launch the game → It should now automatically load PLK’s Remote Lua Loader


36. Bonus Step: To autoload etahen, place on /data/ps5_lua_loader/ folder on your PS5 both etahen.bin and a file named autoload.txt with these lines:
!5000
etahen.bin
 
Last edited by madbrainx,
That's direct download. The modern Limewire is just a file hosting website it's not like the old days of a peer 2 peer program
I never used Limewire, as it could nuke a PC back in the day. I just seen the name and thought it was a torrent file, didn't know they are no longer P2P now.
 
They all auto load now with the new loader.

I got the list below from: https://www.psdevwiki.com/ps4/Visual_Novels#Artemis_Engine:_Physical_PS4_games

Artemis Engine: Physical PS4 games:
2017-11-21 CUSA09825 01.00 Tonari ni Kanojo no Iru Shiawase ~Two Farce~
2017-12-20 CUSA09647 01.00 Sen no Hatō, Tsukisome no Kōki
2018-02-21 CUSA10679 01.00 Azayaka na Irodori no Naka de, Kimi Rashiku
2018-05-23 CUSA11481 01.00 Mikagami Sumika no Seifuku Katsudou

2018-07-01 CUSA11977 01.00 Tonari ni Kanojo no Iru Shiawase ~Winter Guest~
2018-08-22 CUSA12049 01.00 Boku to Nurse no Kenshuu Nisshi

2018-10-25 CUSA13303 01.00 Nora to Oujo to Noraneko Heart HD, Noratoto HD
2019-02-27 CUSA13586 01.00 Nora to Oujo to Noraneko Heart 2, Noratoto 2

2019-03-27 CUSA14324 01.00 Haruoto Alice * Gram: Snow Drop
2019-08-28 CUSA16229 01.00 Aikagi Kimi to Issho ni Pack
2019-09-19 CUSA16074 01.00 Raspberry Cube
2020-01-30 CUSA17112 01.00 IxSHE Tell

2019-10-23 CUSA17122 01.00 Aerial Life
2019-11-27 CUSA17048 01.00 Amamane
2019-12-05 CUSA17068 01.00 Aibeya
2020-01-29 CUSA18107 01.00 Boku to Joi no Shinsatsu Nisshi
2020-02-26 CUSA18106 01.00 Maid-san no Iru Kurashi

2020-05-27 CUSA18998 01.05 Tonari ni Kanojo no Iru Shiawase ~Summer Surprise~
2020-08-26 CUSA19341 02.00 Kiss Trilogy, contains Hotch Kiss, Kiss Bell and Kiss Ato
2020-08-26 CUSA19362 02.00 Kiss Ato
2020-09-23 CUSA19556 02.00 Aikagi 2
2020-10-29 CUSA19370 02.20 Aikano ~Yukizora no Triangle~
2020-10-29 CUSA19555 02.20 Tonari ni Kanojo no Iru Shiawase ~Curious Queen~
2021-02-24 CUSA25179 03.00 Jinki Resurrection
2021-09-29 CUSA27389 04.03 Hamidashi Creative, Hamikuri

2021-10-27 CUSA29031 04.50 Keiken Zero na Classmate π
2021-11-24 CUSA29745 04.51 Fuyu Kiss
2021-12-02 CUSA29845 04.51 Strawberry Nauts
2022-04-27 CUSA32156 05.10 Kiss Kara Hajimaru Gyaru no Koi: Kurumi no Uwasa to Honto no Kimochi
2022-06-22 CUSA32769 05.50 Aiyoku no Eustia
2022-07-27 CUSA33223 06.00 Himemiya-san wa Kamaitai
2022-09-29 CUSA34541 06.02 Tonari ni Kanojo no Iru Shiawase ~i fight with summer~
2022-12-22 CUSA37878 06.50 Tonari ni Kanojo no Iru Shiawase ~in first snow with her~
2024-04-17 CUSA45810 09.20 Doukyuusei Remake CSver

🟢 = Officially supported
🟠 = Community-confirmed
🔴 = Currently unsupported.
Others are still untested/unconfirmed

Other potential physical games using the Artemis engine (or a completely different engine):
2017-01-25 CUSA06588 01.00 Ao no Kanata no Four Rhythm HD EDITION
2018-05-23 CUSA10693 01.00 Karumaruka * Circle
2018-08-22 CUSA45656 01.00 Floral Flowlove
2018-11-21 CUSA13361 01.00 Hanasaki Work Spring!
2019-02-28 CUSA14527 01.00 Daitoshokan no Hitsujikai: Library Party
2019-03-13 CUSA10522 01.00 Love R
2019-06-26 CUSA14589 01.00 KonoSuba: God’s Blessing on This Wonderful World! Labyrinth of Hope and the Gathering of Adventurers!
2019-09-25 CUSA18108 01.00 Mell Kiss
2019-12-18 CUSA16464 01.00 Hatsuyuki Sakura
2020-02-26 CUSA17999 01.00 Ltd. (LoveR Kiss(ラヴアール キス)
2020-04-22 CUSA34817 01.00 Aonatsu Line
2020-07-29 CUSA15982 01.02 E School Life
2020-08-26 CUSA33384 02.00 Hotch Kiss
2020-08-26 CUSA19342 02.00 Kiss Bell
2020-08-27 CUSA19472 02.00 KonoSuba: God's Blessing on this Wonderful World! Labyrinth of Hope and the Gathering Adventurers Plus
2020-09-23 CUSA19262 02.00 Ai Kiss
2020-12-17 CUSA15378 02.50 Ryuuou no Oshigoto!
2021-03-24 CUSA25535 03.00 Ai Kiss 2
2021-07-15 CUSA19472 04.00 Kono Subarashii Sekai ni Shukufuku o! Plus
2021-08-25 CUSA18351 04.00 Kakenuke★Seishun Sparking!
2021-11-24 CUSA29697 04.51 Parfait Remake
2022-10-26 CUSA30131 06.50 D.C.4 Fortunate Departures
2022-11-23 CUSA36321 06.50 Anoko wa Ore Kara Hanarenai
2023-08-23 CUSA43189 08.00 D.C. III P.S. ~Da Capo III~ Plus Story -
2023-12-20 CUSA45058 08.60 D.C.5 ~Da Capo 5~
2024-02-21 CUSA47356 09.00 Seifuku Kanojo
2024-03-20 CUSA45138 09.20 Ambitious Mission
oh for real? So just pick any you can find and they autoload the LUA exploit?
 
Whats the need of these back up for PS5? SOMEONE CAN EXPLAIN TO ME?
HOW TO USE THEM?
It's basically a way to get the save data on your system for people who can't use a ps4 to alter the save data and transfer with USB. So if you can't transfer your data with USB or ftp, this is the only way for you to get it on your system
 
  • Love
Reactions: zebrone
oh for real? So just pick any you can find and they autoload the LUA exploit?
Yeah, pretty much. Right now only the ones highlighted in green and orange are fully supported. Some from the first list might work too, just not guaranteed. Even the ones in red could get support later since they use the Artemis engine.
 
Whats the need of these back up for PS5? SOMEONE CAN EXPLAIN TO ME?
HOW TO USE THEM?
Just extract the download to an exfat formatted flash drive or hard drive plug it into your ps5 then go to settings/system /backup and restore then choose ps4 and restore the lua backup this will delete your games and saves and profile.
 
They all auto load now with the new loader.

I got the list below from: https://www.psdevwiki.com/ps4/Visual_Novels#Artemis_Engine:_Physical_PS4_games

Artemis Engine: Physical PS4 games:
2017-11-21 CUSA09825 01.00 Tonari ni Kanojo no Iru Shiawase ~Two Farce~
2017-12-20 CUSA09647 01.00 Sen no Hatō, Tsukisome no Kōki
2018-02-21 CUSA10679 01.00 Azayaka na Irodori no Naka de, Kimi Rashiku
2018-05-23 CUSA11481 01.00 Mikagami Sumika no Seifuku Katsudou

2018-07-01 CUSA11977 01.00 Tonari ni Kanojo no Iru Shiawase ~Winter Guest~
2018-08-22 CUSA12049 01.00 Boku to Nurse no Kenshuu Nisshi

2018-10-25 CUSA13303 01.00 Nora to Oujo to Noraneko Heart HD, Noratoto HD
2019-02-27 CUSA13586 01.00 Nora to Oujo to Noraneko Heart 2, Noratoto 2

2019-03-27 CUSA14324 01.00 Haruoto Alice * Gram: Snow Drop
2019-08-28 CUSA16229 01.00 Aikagi Kimi to Issho ni Pack
2019-09-19 CUSA16074 01.00 Raspberry Cube
2020-01-30 CUSA17112 01.00 IxSHE Tell

2019-10-23 CUSA17122 01.00 Aerial Life
2019-11-27 CUSA17048 01.00 Amamane
2019-12-05 CUSA17068 01.00 Aibeya
2020-01-29 CUSA18107 01.00 Boku to Joi no Shinsatsu Nisshi
2020-02-26 CUSA18106 01.00 Maid-san no Iru Kurashi

2020-05-27 CUSA18998 01.05 Tonari ni Kanojo no Iru Shiawase ~Summer Surprise~
2020-08-26 CUSA19341 02.00 Kiss Trilogy, contains Hotch Kiss, Kiss Bell and Kiss Ato
2020-08-26 CUSA19362 02.00 Kiss Ato
2020-09-23 CUSA19556 02.00 Aikagi 2
2020-10-29 CUSA19370 02.20 Aikano ~Yukizora no Triangle~
2020-10-29 CUSA19555 02.20 Tonari ni Kanojo no Iru Shiawase ~Curious Queen~
2021-02-24 CUSA25179 03.00 Jinki Resurrection
2021-09-29 CUSA27389 04.03 Hamidashi Creative, Hamikuri

2021-10-27 CUSA29031 04.50 Keiken Zero na Classmate π
2021-11-24 CUSA29745 04.51 Fuyu Kiss
2021-12-02 CUSA29845 04.51 Strawberry Nauts
2022-04-27 CUSA32156 05.10 Kiss Kara Hajimaru Gyaru no Koi: Kurumi no Uwasa to Honto no Kimochi
2022-06-22 CUSA32769 05.50 Aiyoku no Eustia
2022-07-27 CUSA33223 06.00 Himemiya-san wa Kamaitai
2022-09-29 CUSA34541 06.02 Tonari ni Kanojo no Iru Shiawase ~i fight with summer~
2022-12-22 CUSA37878 06.50 Tonari ni Kanojo no Iru Shiawase ~in first snow with her~
2024-04-17 CUSA45810 09.20 Doukyuusei Remake CSver

🟢 = Officially supported
🟠 = Community-confirmed
🔴 = Currently unsupported.
Others are still untested/unconfirmed

Other potential physical games using the Artemis engine (or a completely different engine):
2017-01-25 CUSA06588 01.00 Ao no Kanata no Four Rhythm HD EDITION
2018-05-23 CUSA10693 01.00 Karumaruka * Circle
2018-08-22 CUSA45656 01.00 Floral Flowlove
2018-11-21 CUSA13361 01.00 Hanasaki Work Spring!
2019-02-28 CUSA14527 01.00 Daitoshokan no Hitsujikai: Library Party
2019-03-13 CUSA10522 01.00 Love R
2019-06-26 CUSA14589 01.00 KonoSuba: God’s Blessing on This Wonderful World! Labyrinth of Hope and the Gathering of Adventurers!
2019-09-25 CUSA18108 01.00 Mell Kiss
2019-12-18 CUSA16464 01.00 Hatsuyuki Sakura
2020-02-26 CUSA17999 01.00 Ltd. (LoveR Kiss(ラヴアール キス)
2020-04-22 CUSA34817 01.00 Aonatsu Line
2020-07-29 CUSA15982 01.02 E School Life
2020-08-26 CUSA33384 02.00 Hotch Kiss
2020-08-26 CUSA19342 02.00 Kiss Bell
2020-08-27 CUSA19472 02.00 KonoSuba: God's Blessing on this Wonderful World! Labyrinth of Hope and the Gathering Adventurers Plus
2020-09-23 CUSA19262 02.00 Ai Kiss
2020-12-17 CUSA15378 02.50 Ryuuou no Oshigoto!
2021-03-24 CUSA25535 03.00 Ai Kiss 2
2021-07-15 CUSA19472 04.00 Kono Subarashii Sekai ni Shukufuku o! Plus
2021-08-25 CUSA18351 04.00 Kakenuke★Seishun Sparking!
2021-11-24 CUSA29697 04.51 Parfait Remake
2022-10-26 CUSA30131 06.50 D.C.4 Fortunate Departures
2022-11-23 CUSA36321 06.50 Anoko wa Ore Kara Hanarenai
2023-08-23 CUSA43189 08.00 D.C. III P.S. ~Da Capo III~ Plus Story -
2023-12-20 CUSA45058 08.60 D.C.5 ~Da Capo 5~
2024-02-21 CUSA47356 09.00 Seifuku Kanojo
2024-03-20 CUSA45138 09.20 Ambitious Mission
Aibeya (CUSA17068) is Officially supported https://github.com/shahrilnet/remote_lua_loader
 
Just extract the download to an exfat formatted flash drive or hard drive plug it into your ps5 then go to settings/system /backup and restore then choose ps4 and restore the lua backup this will delete your games and saves and profile.
But Does the last back up contain only this save (PS5 Lua v17.0 CUSA17112 fix) or all the valid saves discovered until now?
 
Someone on Discord confirmed Aikano Yukizora no Triangle works with the latest Lua loader. It's already listed under 'LUA (2.00-LATEST)' in the OP, along with other community-confirmed titles. Two other games show up as supported in this repo: https://github.com/MasterPS0/RLL_itsPLK, but I haven’t seen any other confirmation yet:

  • Tonari ni Kanojo no Iru Shiawase Summer Surprise
  • Mikagami Sumika no Seifuku Katsudou

These are still unsupported:
Azayaka na Irodori no Naka de Kimi Rashiku CUSA10679
Two Farce CUSA09825

edit:
also confirmed unsupported yet:
Mikagami Sumika no Seifuku Katsudou

confirmed supported:
Amamane CUSA17048
That’s great news. That’s where I saw the title from. Searched each one until I found one for a reasonable price and purchased it. Now to wait for delivery and implication.
 

Site & Scene News

Popular threads in this forum