Tutorial  Updated

PS5 Exploit Guide

PS5 Hack Status:


FW Ranges:
2.XX = PS4/5 backups (KEX+HV+Linux) + keys exploit (WK: 2.50 best / 2.7X max)
3.XX = PS4/5 backups (KEX+HV+Linux) + keys exploit (WK/BD/LUA: 3.20 best / 3.21 max)
4.XX = PS4/5 backups (KEX+HV+Linux) + keys exploit (WK/BD/LUA (Y2/NF/YARPE 4.03+): 4.50 best / 4.51 max)
5.XX = PS4/5 backups (KEX+HV+Linux) + keys exploit (
WK/BD/Y2/NF/LUA/YARPE: 5.50 best + max)

6.XX = PS4/5 backups (KEX+HV+Linux) (BD/Y2/NF/LUA/YARPE: 6.50 max)
7.XX = PS4/5 backups (KEX+HV+Linux) (
WK/BD/Y2/NF/LUA/YARPE: 7.61 best + max)
8.XX-10.00 = PS4/5 backups (KEX+HV+Linux) (WK/BD/Y2/NF/LUA/YARPE)
10.01-12.70 = PS4/5 backups (KEX+HV+Linux) (
WK/BD/Y2/NF/LUA/YARPE)
13.XX-13.60 = PS4/5 backups (KEX+HV+Linux) (
WK/BD(13.42)/Y2/LUA/YARPE)
14.XX = No public KEX, HV/A53 patched in 14.20, UL ONLY (LUA/YARPE)

NOTE 1: Recommended firmware is subjective. Staying low is always recommended.
NOTE 2: Do not update too many major versions (e.g., 4.xx to 5.xx or 7.xx to 8.xx). Remain low unless all you want is backups.
NOTE 3: P2JB can take over an hour to exploit on FW up to 12.70.


Hypervisor (HV):
Highest released HV: 13.60
Highest unreleased HV: 14.00
*unreleased/unimplemented


Kernel (KEX):
Highest released KEX:
13.60 (ReLapse)
Highest unreleased KEX: 14.10 (Gezine)
UMTX2:
1.00-7.61 (*WK to 5.50 / BDJB to 7.61)
Lapse: 1.00-10.01
Relapse: 7.00-13.60
Poopsploit:
4.03-12.00 (*BD to 12.00)
P2JB: 9.00-12.70 (*WK: Lapse to 10.01 / P2JB to 12.70)

Userland (UL):
Webkit: 1.00-5.50 (PSFREE +UMTX2) / 7.00-13.60 (RELAPSE) (Recommended)
LUA (Artemis): 2.00-LATEST (LUA exploit, + Lapse up to 10.01)
Y2JB: 4.03-13.40 (YouTube exploit, + Lapse: 10.01 / P2JB: 12.70)
NFNH: 4.03-12.XX (Netflix exploit, + Lapse: 10.01)
YARPE: 4.03-12.XX (Ren'Py exploit, + Lapse: 10.01 / P2JB: 12.70)
BD-JB: 1.00-13.42 (BD exploit + UMTX2: 7.61 / BD-JB5 + Poops to 12.00) (14.XX SOON)
Mast1C0re: 1.00-7.61 (Depreciated for LuaC0re)
LuaC0re: 1.00-12.70 (Poops: 4.03-12.00/P2JB: 9.00-12.70)
REDIS: 1.00-5.50 (Jordy's untethered JB on boot)

NOTE 1: A userland entry point (UL) chained to kernel exploit (KEX) is required to exploit your console at bare minimum.
NOTE 2: Consoles 7.00-13.60 should now use WebKit and RELAPSE (Recommended)


Useful Applications:
FPKG: 3.00-11.60 (KStuff Lite) / 12.XX-13.60 (KStuff-NG SOON)
Kstuff Lite: 3.00-12.70
HERE
Kstuff Toggle: 3.00-12.00 HERE
PS5 App Dumper: 3.00-13.60 HERE
Dump Runner: 3.00-12.00 HERE
Dump Installer: 3.00-12.00 HERE
Backporting: Possible (backpork / Porkfolio)
PS4/PS5 DLC: Work with Kstuff Lite
Trophies: Work with Kstuff Lite
Compression: Works with Kstuff Lite
Homebrew Enabler: etaHEN (3.00-10.01) latest HERE
PS5 Backup manager: ItemzFlow Compatibility list: HERE
PS4 Backup Loading: Works (rest mode & backports work, can crash).
PS5 Debug NG: 3.XX-13.XX
HERE
PS5 Remote Play: Works HERE & HERE
PS5 Trainers/Cheats: Work

UART:
HERE
Linux: (OG: 3.00-13.60) HERE
Kldload (wip): 3.00-6.50 HERE
PSN access: NEVER
Latest OFW: 14.22 (2/11/26)
Summarised OFW/Model guide: HERE
1.XX-7.61 compatibility list:
HERE
PS5 SDK Repo: HERE
Legit PKG Updates: HERE or HERE
OFW Updates: HERE (history HERE)

Preparing Your Console:


It is recommended to either self-host offline or block these addresses in your router to avoid accidental updates or getting an update nag. Using the DNS method is no longer failsafe, as these are not guaranteed to be running 24/7.


dau01.ps5.update.playstation.net
dbr01.ps5.update.playstation.net
dcn01.ps5.update.playstation.net
deu01.ps5.update.playstation.net
dhk01.ps5.update.playstation.net
djp01.ps5.update.playstation.net
dkr01.ps5.update.playstation.net
dmx01.ps5.update.playstation.net
dru01.ps5.update.playstation.net
dsa01.ps5.update.playstation.net
dtw01.ps5.update.playstation.net
duk01.ps5.update.playstation.net
dus01.ps5.update.playstation.net
fau01.ps5.update.playstation.net
fbr01.ps5.update.playstation.net
fcn01.ps5.update.playstation.net
feu01.ps5.update.playstation.net
fhk01.ps5.update.playstation.net
fjp01.ps5.update.playstation.net
fkr01.ps5.update.playstation.net
fmx01.ps5.update.playstation.net
fru01.ps5.update.playstation.net
fsa01.ps5.update.playstation.net
ftw01.ps5.update.playstation.net
fuk01.ps5.update.playstation.net
fus01.ps5.update.playstation.net
hau01.ps5.update.playstation.net
hbr01.ps5.update.playstation.net
hcn01.ps5.update.playstation.net
heu01.ps5.update.playstation.net
hhk01.ps5.update.playstation.net
hjp01.ps5.update.playstation.net
hkr01.ps5.update.playstation.net
hmx01.ps5.update.playstation.net
hru01.ps5.update.playstation.net
hsa01.ps5.update.playstation.net
htw01.ps5.update.playstation.net
huk01.ps5.update.playstation.net
hus01.ps5.update.playstation.net
sgst.prod.dl.playstation.net
gs2.ww.prod.dl.playstation.net

Alternative DNS IP:
62.210.38.117 - User Guide = ES7in1
or
45.56.67.85
(Leave DNS 2 blank)

To determine your OFW version:
Go to settings > system > console information.

Version string info:
Year.Half (1st/2nd half of the year)-Major Version No.Minor Version No.Extended info-Further Info.Retail/Debug

21.02-04.03.00.00-00.00.00.0.1

It is recommended to keep your console as low as possible to have access to better jailbreak stability and features. Stay as low as possible within the "Golden" firmware brackets that apply to your current firmware, see the top of this page.

(No jailbreak is ever guaranteed. No developer is obliged to release anything publicly)

WARNING:

Only update OFW manually via USB by getting the firmware file from HERE and installing from <USB>:/PS5/UPDATE/PS5UPDATE.PUP
(Updating with RECOVERY PUP will perform a factory format and will wipe your internal HDD)

PS5 factory mode PUP installation path:
/usb/PROSPERO/UPDATE/PROSPEROUPDATE.PUP

NOTE: Make a system back up before attempting any modifications.
On console: go to [Settings] > [System] > [System Software] > [Back Up and Restore] > [Back Up Your PS5]

Select Your Jailbreak:


WEBKIT:BD-JB:LUA:Y2JB:NFNH:YARPE:LuaC0re:BD-UN-JB:


  1. Information:
    Firmware 1.00-5.50 or 7.00-13.60 is required for the webkit exploit.

    Enabling web browser:
    Open [Settings] > select [Users & Accounts] > select [YouTube] > click "Link" > click "use browser" > click "terms" (bottom right) > click google apps icon (top right) > select Google Search.

    Exploiting 1.00-5.50:
    Enter https://zecoxao.github.io/luasauce/ or https://github.com/kmeps4/PSFree into google > click “Jailbreak" or wait for it to complete.

    Exploiting 7.00-13.60:

    https://ntfargo.github.io/Relapse-Exploit/

    https://zecoxao.github.io/bagagwa/

    https://soniciso1.github.io/poopicker/

    Debug settings will be loaded, and the package installer can be found under [SETTINGS] > [DEBUG SETTINGS].

  2. Important:
    You will need a BD dive paired to your Slim/Pro console or an OG Phat model . Consoles must be on 1.00-13.42 to run this exploit.


    Recommended ISO: Viktorious AIO Auto BD-JB ISO for 4.XX-7.61

    Exploiting: 1, Burn ISO to a blank BD-R or BD-RE > Insert into console > click on the [DISC PLAYER] icon.

    2, Highlight [PIPELINE RUNNER] > click option 2 [Normaljailbreak-etaHEN-UMTX1.pipe] to auto load etaHEN ready for ItemzFlow.

    ELF Loader uses PS5 IP: port 9021 / BIN loader uses 9020 / Jar loader uses port 9025

    Debug settings will be loaded, and the package installer can be found under [SETTINGS] > [DEBUG SETTINGS].

  3. Important:
    LUA entry point works from 2.00 to the latest OFW, but there is no KEX above 12.70 yet.
    (A compatible PS4 game is required to launch the exploit on PS5. See below)

    Your PS5 console must be activated to use save copying for PS4 games.
    1. Insert your game disc and, as soon as possible, make a save file within it.
    2. Copy the save files to USB, go to [SETTINGS] > [STORAGE] > [CONSOLE STORAGE] > [SAVE DATA] > [PS4 GAMES] > select the game save and copy to a USB drive.
    3. On PC, using a Google Drive account, make a new folder with the GAME ID of your game, and upload the savedata & savedata.bin files to that folder.
    4. Share the folder, set it to editor mode, share with anyone, and click "copy the link".
    5. Join the HTOS Discord group: HERE type "/decrypt", select "FALSE" for including SCE_SYS, paste or type in the Google Drive link, and press enter. The bot should begin mounting your save. (If it doesn't, paste in the link again.)
    6. Click "ENCRYPTED" to remove the Sony PFS layer. Download the generated files and extract the folder to your desktop (you should have 4 files in there and be named dec_savedata_CUSA[GAME ID]).
    7. Using REMOTE LUA LOADER, open the savedata folder, copy the 20 files within into your encrypted save folder on your desktop.
    8. Upload the encrypted save folder (now with 24 files in) to your Google Drive. It should be named "dec_savedata_CUSA[GAME ID]" where GAME ID is your games 5 digit number, and set it to editor mode, share with anyone, and then click "copy the link".
    9. Go back to the HTOS discord server, and type "/encrypt", hit "FALSE" for uploading individually, and "FALSE" to include SCE_SYS. Finally, hit shared_gd_link and paste in your link to the original save (4 files) folder. (If it doesn't, paste in the link again.)
    10. When this is done, paste the link to the decrypted save (24 files) folder, and the bot will encrypt the files.
    11. Resign the files by typing "/resign" followed by your account name on the console, or PSN ID associated with that account if using the latest OFW.
    12. Download the resigned files, extract the files to your USB drive and overwrite them into the savedata folder on your USB or external drive.
    13. Copy the saves back to your console [SETTINGS] > [SAVE DATA AND GAME/APP SETTINGS] > [SAVE DATA PS4] > [COPY OR DELETE FROM USB] > [COPY TO CONSOLE STORAGE] > select your game save folder from the USB drive and copy/overwrite old save data.
    14. Load LUA game again, and you should see the LUA LOADER screen.
    15. You can use "SEND_LUA.PY" to send the UMTX files to the loader.
    (NOTE: Some games require manual loading of save game)

    On firmware up to 7.61, you can now load UMTX/2 followed by etaHEN by sending the files to your console IP on PORT 9026.
    On firmware 8.00-LATEST, you can connect with the REMOTE LUA LOADER APP to send debug notifications or FTP on port 1337.

    LUA Loader: HERE or HERE

    Auto LUA Loader Fork: HERE

    Compatible LUA games:
    Aerial Life (CUSA17122)
    Aibeya (CUSA17068)
    Aikagi 2 (CUSA19556)
    Aikagi Kimi to Issho ni Pack (CUSA16229)
    Aikano Yukizora no Triangle (CUSA19370)
    Boku to Nurse no Kenshuu Nisshi (CUSA12049)
    Boku to Joi no Shinsatsu Nisshi (CUSA18107)
    Fuyu Kiss (CUSA29745)
    Hamidashi Creative (CUSA27389)
    Hamidashi Creative Demo (CUSA27390 requires the latest OFW to download from PSN)
    Haruoto Alice (CUSA14324)
    IxSHE Tell (CUSA17112)
    IxSHE Tell Demo (CUSA17126)
    Jinki Resurrection (CUSA25179)
    Jinki Resurrection Demo (CUSA25180 requires the latest OFW to download from PSN)
    Maid-san no Iru Kurashi (CUSA18106)
    Nora Princess and Stray Cat Heart HD (CUSA13303: Rename save9999.dat into nora_01.dat)
    Nora Princess and Strat Cat Heart 2 (CUSA13586)
    Raspberry Cube (CUSA16074)
    Winter Guest (CUSA11977)

    WARNING: using demos is free but can become corrupt, and you cannot upgrade your internal HDD either. If you lose the demo you can no longer use the exploit. Disc recommended.

    Incompatible LUA games:

    Dokyusei Remake Csver (CUSA47117)
    Dōkyūsei: Bangin' Summer - Home Edition Demo (CUSA47132)
    Kiss Trilogy (CUSA19341)
    Love Clear Demo (CUSA18109)
    Mikagami Sumika no Seifuku Katsudou (CUSA11481)
    Sen no Hatou, Arazone no Hime (CUSA09647)
    Tonari ni Kanojo no Iru Shiawase: Two Farce (CUSA09825)
    Tonari ni Kanojo no Iru Shiawase Summer Surprise (CUSA18998)

    Debug settings will be loaded, and the package installer can be found under [SETTINGS] > [DEBUG SETTINGS].

  4. Requirements:
    PS5 console must be on 4.03-12.70 and previously activated through PSN or fake activated to use the YouTube app, unless you're restoring a backup.
    (Note: restoring a backup will factory reset your console).

    Information:
    If updating and older installation, download the latest download0.dat > use FTP or PS5 Explorer to place it in the user/download/PPSA01650 folder.

    Preparation:
    Download the Y2JB_backup_X.X(4.03) if you're on 4.03-12.40, or the Y2JB_backup_X.X(12.20) if you're on 12.60 or higher from HERE
    On PC: format a USB 3.0 HDD to exFAT, and copy the PS5 folder from the backup to the root, and put the latest nanodnf.efl from nanoDNS to the root too.
    On console: go to [Settings] > [System] > [System Software] > [Back up and Restore] > [Restore] > select the y2JB back up & let it install (the console will reboot when complete).
    (Note: The exploit will now be accessible under the [MEDIA] tab)

    Exploiting:
    Going to [Settings] > [Network] > [Settings] > [Set up Internet Connection] > [Set up Manually] > set up a wireless or LAN connection > change [DNS Settings] to manual > change [Primary DNS] to 127.0.0.1 > click [Done] > open the [YouTube App].
    (Note: Ignore and internet connection issue warnings)

    Firmware up to 10.01 will use Lapse Kernel Exploit. Firmware 10.20-12.70 and above will use P2JB and could take up to an hour.

    You can send payloads using netcat GUI to PS5's IP Address & port 9021.

    You can swap the download0.dat to itzPLK version for auto loading and payload manager in future (payload manager accessible through browser on 127.0.0.1:8084)

    Debug settings will be loaded, and the package installer can be found under [SETTINGS] > [DEBUG SETTINGS].

  5. Requirements:
    PS5 console must be on 4.30-10.01 and previously activated through PSN or fake activated. You will need a 256GB external HDD (minimum).

    Preparation:
    Download balenaEtcher
    Download the latest Extended Storage or M.2 Image (select your m.2's capacity)

    EXTERNAL DRIVE METHOD (Netflix_PS5_EU_Ext.7z):
    1a, On PC: connect your 256GB (min) USB drive to your Windows/Mac/Linux PC > extract the image to your computer > open Etcher > click [Flash From File] & select the extracted image *.zip > click [Select Target] & choose the external drive > Click [Flash!] & allow it to complete.
    (Note: 256GB is the smallest drive you can use)

    2a, On console: click [Settings] > [Storage] > [USB Extended Storage] > [Games and Apps] > press X on [Netflix] > select [NETFLIX] under items to move > select [Move] > move to internal storage & allow it to complete.
    (Note: The exploit will now be accessible under the [MEDIA] tab)

    INTERNAL DRIVE METHOD (Netflix.XXXXGB.7z):
    1b, On PC: connect the M.2 to your Windows/Mac/Linux PC > extract the image to your computer > open Etcher > click [Flash From File] & select the extracted image *.zip > click [Select Target] & choose the external drive > Click [Flash!] & allow it to complete.
    (Note: 4TB will take 80 mins, 2TB 45 mins, 256GB 10 mins)

    2b, On console: Power off the console > insert the M.2 SSD > power on the console > click [Settings] > [Storage] > press X on [Netflix] > select [NETFLIX] under items to move > select [Move] > move to internal storage & allow it to complete.
    (Note: The exploit will now be accessible under the [MEDIA] tab).

    Exploiting:
    1a, for consoles 10.01 and below, on console: go to [Settings] > [Network] > [Settings] > [Set up Internet Connection] > [Set up Manually] > set up a wireless or LAN connection. Go to Proxy > change [Automatic] to [Manual] > enter Address: 172.105.156.37 & port: 42069 > click [Done] > open the [Netflix App].
    (Note: Ignore and internet connection issue warnings)

    1b, for consoles 10.20-12.70, COMING SOON.

    Debug settings will be loaded, and the package installer can be found under [SETTINGS] > [DEBUG SETTINGS].

  6. Important:
    YARPE works from 4.30 to 12.70 (9.00 - 12.07 via P2JB)
    (A compatible PS4 game is required to launch the exploit on PS5. See below)

    Requirements:
    PS5 console must be on 4.30-10.01 to use this exploit.

    Exploiting:
    coming soon

    Debug settings will be loaded, and the package installer can be found under [SETTINGS] > [DEBUG SETTINGS].

  7. Requirements:
    PS5 console must be on 4.30-12.70 to use this exploit. SWRR

    Exploiting:
    coming soon

    Debug settings will be loaded, and the package installer can be found under [SETTINGS] > [DEBUG SETTINGS].


  8. [UPDATED]
    No longer needed if using latest WebKit (to 13.60) or BD-JB (to 13.42)!


    Important:

    This method modifies the BD-J stack to allows BD-JB entry point to be re-enabled on consoles up to 13.60, for convenience only.

    Very Important:
    This method requires your console to be jailbroken by another method first to gain access to alter the files.

    https://github.com/Gezine/BD-UN-JB

    Preparation:
    Burn the ISO to a blank Blu Ray, insert it into the jailbroken console. Send the bdj_unpatch.elf to elfldr using netcat GUI to PS5's IP Address & port 9021 to unpatch BD-J.

    (NOTE: DO NOT REINSTALL/UPDATE FW, IT WILL WIPE THE PATCH AND LOSE BD-JB)


Once jailbroken it is recommended to run KSTUFF LITE and SHADOWMOUNTPLUS at minimum to get you up and running.
(ShadowMountPlus: is an automated background auto-mounter payload for jailbroken PS5 consoles. Detects, mounts, and installs game dumps from internal or external storage, with support for UFS, exFAT, PFS, and nested compressed PFS containers)

Additional Information:


Blocking Updated with nanoDNS:
Set primary DNS manually to 127.0.0.1. Send latest elf to BIN LOADER using netcat GUI to PS5's IP Address & port 9021.

PS4 GAME INFORMATION:
OFW 1.xx cannot run PS4 games.
OFW 2.xx runs PS4 games up to 8.03

OFW 3.xx runs PS4 games up to 8.52
OFW 4.xx runs PS4 games up to 9.04
OFW 5.xx runs PS4 games up to 9.60
OFW 6.xx runs PS4 games up to 10.50

OFW 7.xx runs PS4 games up to 11.00
OFW 8.xx/9.xx runs PS4 games up to 11.50
OFW 10.xx runs PS4 games up to 12.00

OFW 11.xx runs PS4 games up to 12.50
OFW 12.xx runs PS4 games up to 13.00
OFW 13.xx runs PS4 games up to 13.42
OFW 14.xx runs PS4 games up to 14.00


(Note: PS4 backported FPKGs also work perfectly on an exploited PS5 with Kstuff)


You can install free/demo PKGS (legit pkgs) via the debug pkg installer, provided you have all the files/json/licences required.
(Astro’s Playroom has no licences and can be installed and played from official pkgs and updated inline with your firmware)

Warnings:


1: Never enable IDU mode.
If you do, you will need to enter staff mode by holding L1 + L2 and tapping this combo: circle, cross, square, triangle, right D-Pad. Release L1 + L2, and you can access settings to exit IDU.

2: Try to stay on the lowest FW possible and wait for hacks on that firmware.

3: Installing legit game PKGs you do not own will never work, even if spoofed.

4: If you get stuck in a boot loop at the PS logo, the SNVS is corrupted (if the hash check fails on boot, this causes a “soft brick”). It’s not “bricked”. Simply reinstall your current firmware RECOVERY PUP in safe mode from USB: PS5 > UPDATE > PS5UPDATE.PUP.

Archived Information


 
Last edited by KiiWii,
Does this mean I CAN CONNECT to PSN without being detected by Sony?

If so, how do I do what you're saying?

Because apparently Y2JB takes 50 minutes to jailbreak the console... 😮‍💨

With Relapse, it's instantaneous. I turn on my console, go to the Autoloader, and bam, it jailbreaks and launches Kstuff-lite and ShadowMount+, and I start my games 🤴🏻

What firmware is your PS5 on?
 
Just saw this on social and was wondering what the actual heck is going on! Are updates now being forced on console owners. Unless this is an April Fools joke in October or AI fake news this is quite alarming.
This also happens whenever you use an nvme that was formatted for use with a console on a higher firmware.

When I moved from my retail console to my lower fw one, I saw that you can just move the drives and was hoping it would work to get my games across easily. Sadly that's when I found this out, I figured the fw would limit it, but hey it was worth a try.

That's why it's telling them to remove the m.2 drive or update, I'm not sure if the update file is stored somewhere on the m.2 drive though, like it is on disc games, sneaky bastards.
 
  • Like
Reactions: Mc_Kuc
If a deal sounds too good to be true. It is

Not always, there are still unicorns out there. I picked up an original disc on fw 6.xx a couple of weeks ago for £55. Beeping only, no light. Took it to a console repair shop and they replaced the motherboard for £150 (said it was no charge if they couldnt fix it).
 


Told you, his a53 exploit is patched on 14.20.
So we will have to wait for disclosure from h1

Update from Arks:

View attachment 597562

Rough translation:

"14.20 has been patched (verified by drakmor and me), so all that's left to do is wait for the disclosure and news from HackerOne. The release is certainly imminent."

We know that fpkg for 13.60 is coming. No timeline.
I knew something was fishy with the patch notes for 14.20 and that it was BS for not mentioning security fixes, they are absolutely doubling down on security before GTA releases.

Now there is some things I don't understand about this A53 exploit and the HackerOne program:

-Why should Ark wait for disclosure before sharing the exploit? Is he the one who actually reported it to Sony via HackerOne and is waiting to get paid before disclosing it? If so, why did he do it now and not before? I don't want to shit on him or anything, I'm just wondering about the timing.

-If Ark just reported it today, now that it has been fixed in 14.20, why would Sony reward him anything if it's already patched? Can you just report an already fixed exploit if it hasn't been reported by anyone before? This doesn't make sense to me that Sony would pay for an exploit they are already aware of but maybe I missed something.

-If Ark isn't the one who reported it to HackerOne, why should he wait for disclosure? In that case he has no obligation regarding the program just like Sonic-iso didn't have any for the hypervisor exploit reported by jordy.
 
Remote play does not work nearly good enough to do that imo

Even with official devices like the ps portal remote play is a pipe dream that only really works in very specific scenarios

For example all of my consoles use Ethernet and I can be in the same room or room next to my router

Yet chiaki will be pixelated and have enough input lag where it’s not possible to play anything other than turn based games
Ive found all remote play is flawed and the very idea of how it is done is complete foolishness. That said, many people who arent sensitive to frame time spikes seem to enjoy it. I also found most nintendo 64 games to be unplayable and hated the ps360 generation with a passion thanks to the poor performance. So my perception isnt the same as everyone elses.
 
  • Like
Reactions: TheStonedModder
I knew something was fishy with the patch notes for 14.20 and that it was BS for not mentioning security fixes, they are absolutely doubling down on security before GTA releases.

You are correct. They won't take any half measures. It would not even surprise me if Sony released another FW version in the launch week of GTA6.

Now there is some things I don't understand about this A53 exploit and the HackerOne program:

-Why should Ark wait for disclosure before sharing the exploit? Is he the one who actually reported it to Sony via HackerOne and is waiting to get paid before disclosing it? If so, why did he do it now and not before? I don't want to shit on him or anything, I'm just wondering about the timing.

From what I have discussed with him via DM is that he indeed disclosed it to HackerOne to claim a bounty. Others have reported the same(ish) kind of bug to H1 as well. Like we saw with Relapse. Could be Echo or somebody else. He won't mention it. Does not really matter to me who and why though. I only care about the end result.

The bounty can only be claimed / awarded when the correct procedures are being followed by H1 and Sony. Any infringement will result in the loss of the bounty and it's always a win for Sony in that case.

-If Ark just reported it today, now that it has been fixed in 14.20, why would Sony reward him anything if it's already patched? Can you just report an already fixed exploit if it hasn't been reported by anyone before? This doesn't make sense to me that Sony would pay for an exploit they are already aware of but maybe I missed something.

-If Ark isn't the one who reported it to HackerOne, why should he wait for disclosure? In that case he has no obligation regarding the program just like Sonic-iso didn't have any for the hypervisor exploit reported by jordy.

Arks is waiting for the vulnerability to be disclosed first by Sony or else he will get no bounty award. He can't do anything else in the meantime. For us folks it's the playing the waiting game. That's why I mentioned how Echo is going to handle this.
Post automatically merged:

SONY WARS: LUA STRIKES BACK!!
LuaC0re works on 14.20. Not my system validations though. So that's the reason no screenshot from my part.

I would assume that the Japanese games such as Hamidashi Creative and Raspberry Cube also work. I can't validate it due to all my systems being on 13.60. And for obvious reasons these games works on that FW. Although it still being an entrypoint, so userland.
 
Last edited by HS2005,
You are correct. They won't take any half measures. It would not even surprise me if Sony released another FW version in the launch week of GTA6.



From what I have discussed with him via DM is that he indeed disclosed it to HackerOne to claim a bounty. Others have reported the same(ish) kind of bug to H1 as well. Like we saw with Relapse. Could be Echo or bosybody else. He won't mention it. Does not really matter to me who and why though. I only case about the end result.

The bounty can only be claimed / awarded when the correct procedures are being followed by H1 and Sony. Any infringement will result in the loss of the bounty and it's always a win for Sony in that case.



Arks I waiting for the vulnerability to be disclosed first by Sony or else he will get no bounty award. He can't do anything else in the meantime. For us foks it's the palying the waiting game. That's why I mentioned how Echo is going to handle this.
Post automatically merged:


LuaC0re works on 14.20. Not my system validations though. So that's the reason no screenshot from my part. I would assume that the Japanese games such as Hamidashi Creative and Raspberry Cube also work. I can't validate it due to all my systems being on 13.60. And for obvious reasons this works on that FW.
I see now, thanks for your insight on the situation.

I'm so glad that FPKGs for higher firmwares is coming one way or another (A53 exploit or HV), really looking forward to it. :)
 
If a deal sounds too good to be true. It is

I can almost bet that the HDMI issue isn’t fully fixed

Cause why else would he be getting a new console?
Some times its just a good deal, but that one sounds kind of fishy as if it was a bad repiar and still has problems. I snatched up a sealed 2020 model ps5 for 450 bucks an hour after it was posted about two years ago, and as for the remote play thing, I didn't have such a bad time with chiaki on my switch while I was with grandma in the hospital. Their wifi was crap so I used it to tether with my mobile hotspot and had a fun time trying to platinum crisis core reunion. Minerve got kind of touch and go before I switcehd to the hotspot. I got my ps4 for 15 bucks listed as "parts", the fan connector and the bd connector were ripped off, luckily it still had the hard drive in it and with some soldering of the fan wires, it works with some hdmi issues when coming out of rest mode, I have to disconnect and reconnect the hdmi cable to get the picture back. It was on 7.02 but I was able to update to 9.00 with the nobd payload.
 
  • Like
Reactions: bn2soldier
Just released earlier today.. Will give it a go :)

1792602955671.png
 
Hi everyone,

First of all, sorry if this isn’t the right place for this kind of question. It was the only place I could find. Also, apologies if these questions have been asked many times before. I searched but couldn’t find clear answers, so here I am.

I have a PS5 Pro on firmware 14.10. As far as I know, the jailbreak currently goes up to 13.60, and people are working on getting it to run on 14.00+.

My questions:

  1. What do all the terms mean? I know what a jailbreak is in general. But there are so many terms (WK, BD, Y2, NF, LUA, YARPE) that it’s hard to follow. Could someone explain what each one means?
  2. What do I actually need to fully enjoy the JB? My only goal is to run backups, games and homebrew (ideally installing them directly on the console) and play. Nothing else.
  3. Is 13.60 enough? Would a console on 13.60 give me access to everything, or would an even older firmware be better?
  4. Should I wait or switch consoles? I know there’s no ETA for a 14.10 JB. In your opinion, is it worth waiting? Or would it be better to sell my PS5 Pro (14.10) and buy one on 13.60? My concern is that the 14.10 JB might take months. Worse, it might be released without all the features needed to play or emulate games.
  5. Where can I follow news and learn more? Is there a page or wiki where I can keep up with updates and learn about the different JB types? I’ve found very little information, especially about the methods and the pros and cons of each one.
Thanks in advance!
 
Hi everyone,

First of all, sorry if this isn’t the right place for this kind of question. It was the only place I could find. Also, apologies if these questions have been asked many times before. I searched but couldn’t find clear answers, so here I am.

I have a PS5 Pro on firmware 14.10. As far as I know, the jailbreak currently goes up to 13.60, and people are working on getting it to run on 14.00+.

My questions:

  1. What do all the terms mean? I know what a jailbreak is in general. But there are so many terms (WK, BD, Y2, NF, LUA, YARPE) that it’s hard to follow. Could someone explain what each one means?
  2. What do I actually need to fully enjoy the JB? My only goal is to run backups, games and homebrew (ideally installing them directly on the console) and play. Nothing else.
  3. Is 13.60 enough? Would a console on 13.60 give me access to everything, or would an even older firmware be better?
  4. Should I wait or switch consoles? I know there’s no ETA for a 14.10 JB. In your opinion, is it worth waiting? Or would it be better to sell my PS5 Pro (14.10) and buy one on 13.60? My concern is that the 14.10 JB might take months. Worse, it might be released without all the features needed to play or emulate games.
  5. Where can I follow news and learn more? Is there a page or wiki where I can keep up with updates and learn about the different JB types? I’ve found very little information, especially about the methods and the pros and cons of each one.
Thanks in advance!
I would just start by watching modded warfare videos, then you will have some context. There are many smart helpful people here, but its also a public forum where people could steer you wrong (its better than reddit though).
 
No no no.... the last time i used np-fake-signin on the 9.02 many many many rotations ago we all know what happened :O
I could try OffAct if i remember how to find it & use it :D

Make sure the account you are launching the game from has been activated.
If you are unsure, any account that had been online before is already
activated so no extra step needed. Otherwise make sure you have activated
your account using “OffAct” homebrew and payload “np-fake-signin-ps5”.

EDIT: Found it! V0.4.2 from Jun 25!

https://github.com/ps5-payload-dev/offact/releases
 
Last edited by BobaFett_UK,
Hi everyone,

First of all, sorry if this isn’t the right place for this kind of question. It was the only place I could find. Also, apologies if these questions have been asked many times before. I searched but couldn’t find clear answers, so here I am.

I have a PS5 Pro on firmware 14.10. As far as I know, the jailbreak currently goes up to 13.60, and people are working on getting it to run on 14.00+.

My questions:

  1. What do all the terms mean? I know what a jailbreak is in general. But there are so many terms (WK, BD, Y2, NF, LUA, YARPE) that it’s hard to follow. Could someone explain what each one means?
  2. What do I actually need to fully enjoy the JB? My only goal is to run backups, games and homebrew (ideally installing them directly on the console) and play. Nothing else.
  3. Is 13.60 enough? Would a console on 13.60 give me access to everything, or would an even older firmware be better?
  4. Should I wait or switch consoles? I know there’s no ETA for a 14.10 JB. In your opinion, is it worth waiting? Or would it be better to sell my PS5 Pro (14.10) and buy one on 13.60? My concern is that the 14.10 JB might take months. Worse, it might be released without all the features needed to play or emulate games.
  5. Where can I follow news and learn more? Is there a page or wiki where I can keep up with updates and learn about the different JB types? I’ve found very little information, especially about the methods and the pros and cons of each one.
Thanks in advance!
Hi and welcome aboard!

1. Those terms refer to userland exploits which are basically the entrypoint to exploiting a console. A userland exploit is not enough to jailbreak a console, you also need a kernel exploit for that.

Think of it as this example: you are preparing a party in a house for which you know a way to open the front closed door but you know nothing about what's behind that door.

In that case the userland exploit is the door and the kernel exploit is what's behind (the kitchen, living room, etc).

Most userland exploits you mentioned are kind of irrelevant today (BD-JB, Netflix, Lua and Yarpe) because most people uses Y2JB (Youtube) and WebKit (the web browser, for when they are not already jailbroken).

2. For running backups (on a recent firmware), you only need to run two payloads: kstuff-lite (which basically circumvent the console security measures) and ShadowMountPlus (which mount your games and add them to the home screen). I am only giving you basic informations here, those two payloads do way more than that.

3. Firmware 13.60 gives you access to anything earlier firmwares have except running FPKGs which is the best (and native) game format that you can have on PS5. Please do note that we are very close to FPKGs support getting released on 13.60 aswell (probably before the end of the year).

There is theoretically an advantage of running a firmware below 4.xx for dumping keys but this is not something that you should be interested in if you are not a scene developer.

4. No one has an answer for this unfortunately. This is pure speculation on my end but I don't think we will see a jailbreak released for 14.00 or above anytime soon (even though it technically exist in private) so if that's not much of a hassle, I recommend selling your existing console.

5. This very thread is a nice way to keep you updated but it can go a bit fast sometimes. If you don't have that much time on your end, just check the first post of this thread, @KiiWii is doing a nice job of updating it as fast as he can.

I hope that clears all the confusion you had, don't hesitate to ask more questions if you have any. :)
 
First of all, sorry if this isn’t the right place for this kind of question. It was the only place I could find. Also, apologies if these questions have been asked many times before. I searched but couldn’t find clear answers, so here I am.

Yes this is the right place and also a yes these questions have been asked and answered. Anyway I will give it go and other users can add / contribute where needed.

I have a PS5 Pro on firmware 14.10. As far as I know, the jailbreak currently goes up to 13.60, and people are working on getting it to run on 14.00+.

Correct. The highest JB (Relapse) out there is on 13.60. Jailbreaking 14.10 will take some months. Like I always say: It's playing the waiting game.

My questions:

What do all the terms mean?
I know what a jailbreak is in general. But there are so many terms (WK, BD, Y2, NF, LUA, YARPE) that it’s hard to follow. Could someone explain what each one means?

BD-J or BD-JB is a BluRay Jailbreak. That can used by using a Disc. You need to have a paired Disc drive for this though and a FW that can be jailbroken.
LUA is a reference to LUA games. There is also LuaC0re. Luac0re is a mast1c0re variation that uses Lua scripting for easier exploit development.
Yarpe (Yet Another Ren'Py PlayStation Exploit) is a userland exploit for the PlayStation 4 and PlayStation 5 that executes custom code and Python scripts via manipulated game save data.

What do I actually need to fully enjoy the JB? My only goal is to run backups, games and homebrew (ideally installing them directly on the console) and play. Nothing else.

If your goal is to run backups and homebrow SM+ & kstuff is all you need.
SM+ https://github.com/drakmor/ShadowMountPlus/releases/tag/1.7beta7
Kstuff: https://github.com/EchoStretch/kstuff-lite/releases/tag/v1.11

Is 13.60 enough? Would a console on 13.60 give me access to everything, or would an even older firmware be better?

Older FW can be better depending on your needs. We don't have fpkg for games for 13.60 as of right now. 11.60 is the highest.

Should I wait or switch consoles? I know there’s no ETA for a 14.10 JB. In your opinion, is it worth waiting? Or would it be better to sell my PS5 Pro (14.10) and buy one on 13.60? My concern is that the 14.10 JB might take months. Worse, it might be released without all the features needed to play or emulate games.

You can sell it or just put it on the shelf and buy a seond one.

Where can I follow news and learn more? Is there a page or wiki where I can keep up with updates and learn about the different JB types? I’ve found very little information, especially about the methods and the pros and cons of each one.
Thanks in advance!
You can use / follow this thread. We pretty much cover a lot off stuff about homebrew, exploits etc. etc.
Post automatically merged:

Hi and welcome aboard!
Well it seems somebody already beat me to it. Why ya'll so fast.
 
Thank you so much for the answers, guys! You’ve given me at least the basics I need to start researching and understanding the topic better.

Your answers were genuinely really helpful and informative. I have to say, it makes me really happy to see such a helpful community, because that’s so rare these days! Thanks again, seriously!
 

Site & Scene News

New Hot Discussed User Submitted