PS5 Exploit Guide

ViRGE · Oct 31, 2026

HS2005 said:
View attachment 600220

v0.1.0
Hard fork of ampr_emu designed to achieve maximum performance and stability to run zstd and LZ4 converted games.

Copy libSceAmpr.sprx into the game's fakelib/ and mount the game with ShadowMountPlus (disable fakelib update in settings).

zstd and LZ4 packs can be made by ps5-dump-forge.

Link: https://github.com/quer3q/ampr-emu-ng/releases/tag/v0.1.0

It is interesting to see Drakmor continuing heavy development of ampr_emu. There is no reason to abandon the project - but conversely, it implies that it is going to continue to be needed in the future. Which is to say, he seems to be hedging his bets that MP4/A53 exploits to enable fPKG support are going to be hard to come by in the future.

le237qk1boglz67w8il1 said:
Have a question updating JB concerning FW 11.60 (fpkg!).
Atm I am using webkit-autoloader v0.31 & PLM v0.51.
Youtube App PPSA01650, patched v99.999.999 to prevent updating - original version installed I don't know

How can I check the original installed version number?

There is no easy way to do this that I am aware of. Everything reads from the same (patched) database.

But that's okay. If in doubt, you can just uninstall the YouTube application and install your desired version. Especially with the webkit exploit, losing access to Y2JB for a boot cycle or two is not a huge problem.

Can I switch to notmaj0r J2JB?
Requirements for firmware 4.03 to 12.40 get YouTube app (PPSA01650) version 01.000.003 PKG

If so I just need to transfer the provided download0.dat to
/user/download/PPSA01650

What you have written is essentially correct. For a FW 11.60 console, you want version 01.000.003 of the YouTube app.

I would prefer using PLM
So would need download0-pldmgr.zip
(Same as download0-autoclose.zip, but also launches Payload Manager v0.6.3 automatically after the YouTube app closes)

Then reboot and start Youtube app?

Payload Manager is integrated into Y2JB-Autoloader, and would be installed if you didn't already have it. So once you are sorted, Y2JB-Autoloader will kick over to Payload Manager, just as it does right now with Webkit-Autoloader.

So in short:

0) Uninstall your current YouTube app
1) Install the correct version of YouTube
2) Copy download0.dat from Y2JB-Autoloader to /user/download/PPSA01650/
3) Patch your appinfo.db file with appinfo_editor.py to keep the new YouTube install from updating itself
4) Reboot
5) Start the YouTube app

Scheisssewasser · Oct 31, 2026

zebrone said:
Never tested. Its not released yet

wdym? Both are available and "run", but with heavy graphical glitches on PC.

Will test MK:W on PS5 l8er.

le237qk1boglz67w8il1 · Oct 31, 2026

Thank you Virge! Working now much better with relapse

https://gbatemp.net/threads/ps5-exploit-guide.613891/post-10936959

KiiWii · Oct 31, 2026

Blythe93 said:
I doubt that my autoloader setup will be useful to you but my Payload Manager is still on 0.5.2 and I'm using kstuff lite 1.11, ShadowMountPlus 1.7beta5-fix1 and nanodns 0.4. So far no KPs whatsoever. My current load order is: nanoDNS, ShadowMountPlus, kstuff lite, with 3s delay between them. Note that I'm yet to try out some games in FPKG format so I can't really say how stable it really is.

I had downloaded Redis, nano, SM+ and KSL but after the feedback here, I’ll stick to this set up without Redis.

Probably use YTJB or WebKit…. But still can’t decide on 4.xx or 5.50…

Regarding PSVR2, I see most back ports state “requires 5.xx”, even for the first PSVR2 game released Horizon: Call of the Mountain.

Are there confirmed PSVR2 games backported and working on 4.xx?

Blythe93 · Oct 31, 2026

KiiWii said:
Probably use YTJB or WebKit….

Both work fine on my end, maybe go for webkit? 0.5.2 works just fine on my end, give it a try and see if it's worth setting up YTJB Autoloader. I've been using it Webkit Autoloader just to see if I'll run into more KPs but so far it's 0 out of... 20 or so. Note that I always power off my console and do not use rest mode.

KiiWii said:
But still can’t decide on 4.xx or 5.50…

Can't really help you there.

You know how it goes, lower is better most of time. Go for the lowest that fulfill what you want to use your PS5 for. Since I personally don't know any better, I'm stuck with 5.00.

Hehehe

solitaire4eva · Oct 31, 2026

truemaster said:
what is redis?

It's the closest thing we have to CFW because it is a persistent jailbreak that boots up automatically when logging in.

This jumps right to the spot explaining it, but this was the first release so an older video

Post automatically merged: Oct 31, 2026

KiiWii said:
I had downloaded Redis, nano, SM+ and KSL but after the feedback here, I’ll stick to this set up without Redis.

Probably use YTJB or WebKit…. But still can’t decide on 4.xx or 5.50…

Regarding PSVR2, I see most back ports state “requires 5.xx”, even for the first PSVR2 game released Horizon: Call of the Mountain.

Are there confirmed PSVR2 games backported and working on 4.xx?

I meant to try redis but never got around to it. Thanks for reminding me.

HS2005 · Oct 31, 2026

ViRGE said:
It is interesting to see Drakmor continuing heavy development of ampr_emu. There is no reason to abandon the project - but conversely, it implies that it is going to continue to be needed in the future. Which is to say, he seems to be hedging his bets that MP4/A53 exploits to enable fPKG support are going to be hard to come by in the future.

Indeed. Even if you have fpkg for 13.60 the continues developments for the MP4/A53 will be needed for 14.00 and 14.10.

Post automatically merged: Oct 31, 2026

Mc_Kuc · Oct 31, 2026

AlphaBravo said:
If not interested in scene "drama" don't read.

Everything is connected whether you like or not. I took a particular interest because of all the Devs I follow, I never liked or respected Zeco. I thought he was toxic, hypocritical and a liability to the scene.
I rarely wish iLL on people but hope Sony fry Zeco ass and all those responsible for leaking/selling private keys on PS4. It's unforgivable!!

So glad I never donated to that POS and wonder what the true consequences will be to the scene as a whole going forward.

For all the wonderful things happening in playstation scene, it also feels like aspects of it could blow up any minute as well.

As it stands, Zeco twitter and online presence is still active. I imagine not for long and hope he does end up on that wiki Wall of shame!

Portugal is a poor country.

regex101 · Oct 31, 2026

ViRGE said:
This would be recovering the public keys that the PS5 uses to validate and decrypt content. Right now we can't just decrypt a legit game PKG and all the files inside, for example; we have to use the PS5 as an oracle to decrypt things for us.

But what will stop Sony from patching / changing them in next fw? In a practical sense you're still limited by what can be decrypted with highest exploited fw only. So I still don't understand peoples obsession with the "keys".

xanico · Oct 31, 2026

Mc_Kuc said:
Portugal is a poor country.

Please don´t judge a country for this...

HS2005 · Oct 31, 2026

Not everybody's favorite method, but still an update. Would always keep this as a back-up.

ps5-webkit-autoloader v0.7.0 pre-release 2

A lot of internal changes, so need your feedback.
Focused on relapse, but there's also a change from which poops should benefit too.

Automatically selects the best exploit based on firmware version and network status:

FW > 12.00 and FW <= 13.60: Relapse (Poops does not support > 12.00)
FW == 9.05: Poops (Relapse does not support 9.05)
Active network connection: Relapse
Offline (FW <= 12.00): Poops (works without active network connection)

Link: https://github.com/itsPLK/ps5-webkit-autoloader/releases/tag/v0.7.0-prerelease-2

EDIT: New link.

Post automatically merged: Oct 31, 2026

Update from Drakmor reagrding APR EMU. See changes below:

Link: See attachment

TJackson · Oct 31, 2026

HS2005 said:
Not everybody's favorite method, but still an update. Would always keep this as a back-up.

ps5-webkit-autoloader v0.7.0 pre-release 2
A lot of internal changes, so need your feedback.
Focused on relapse, but there's also a change from which poops should benefit too.

Automatically selects the best exploit based on firmware version and network status:

FW > 12.00 and FW <= 13.60: Relapse (Poops does not support > 12.00)

FW == 9.05: Poops (Relapse does not support 9.05)

Active network connection: Relapse

Offline (FW <= 12.00): Poops (works without active network connection)

View attachment 600278

Link: https://github.com/itsPLK/ps5-webkit-autoloader/releases/tag/v0.7.0-prerelease-2

EDIT: New link.

Post automatically merged: Oct 31, 2026

Update from Drakmor reagrding APR EMU. See changes below:

View attachment 600299

Link: See attachment

Hello. I'm on firmware 12.20 and I jailbroke it using Relapse. Does this mean I need an active network connection every time I start the console?

TheDonmatic · Oct 31, 2026

TJackson said:
Hello. I'm on firmware 12.20 and I jailbroke it using Relapse. Does this mean I need an active network connection every time I start the console?

Connect to network but don't do automatic choose manual and enter these in the DNS lines.

- 45.56.67.85 (Primary DNS)
- 62.210.38.117 (Alternative DNS)

viggen66 · Oct 31, 2026

Any update on fpkg on 13.60 FW, heard new exploit would come out

littlemisskittn · Oct 31, 2026

viggen66 said:
Any update on fpkg on 13.60 FW, heard new exploit would come out

EchoStretch’s version is coming and is proven to work. He’s a trusted dev so it’s a matter of when. Arksama however has been doing nothing but lying and claiming he has and his excuse changes all the time. His latest is that he’s waiting on HackerOne when he’s not even registered for the site. Now he’s trying to piggyback off Echo, but Arksama hasn’t and will never have a single thing. Right now, the only devs you can really trust are EchoStretch, Drakmor, and maybe SonicISO. Everyone else is either a vibe coder using AI for everything or a liar like Arksama trying to string along people to pay for a scam Discord channel.

jason-backup · Oct 31, 2026

Is S01-W26 13.60 or lower ?

HS2005 · Oct 31, 2026

TJackson said:
Hello. I'm on firmware 12.20 and I jailbroke it using Relapse. Does this mean I need an active network connection every time I start the console?

Well you need a active connection. Meaning it does not have to be connected to the internet.

You can put in a localhost for example: 127.0.0.1, 127.0.0.2 or other DNS as you please.
You just have to put the switch for a connection ON to run Y2JB with relapse. See image below.

Post automatically merged: Oct 31, 2026

TheDonmatic said:
Connect to network but don't do automatic choose manual and enter these in the DNS lines.

45.56.67.85 (Primary DNS)

62.210.38.117 (Alternative DNS)

Only setting a primary DNS is suffient in this case. No need for a fallback. But you can also choose one of the above ^^ if you don't want to set a localhost DNS.

viggen66 · Oct 31, 2026

littlemisskittn, thanks for the reply, yes anyone can make fake news and achievements.

TJackson · Oct 31, 2026

TheDonmatic said:
Connect to network but don't do automatic choose manual and enter these in the DNS lines.

45.56.67.85 (Primary DNS)

62.210.38.117 (Alternative DNS)

HS2005 said:
Well you need a active connection. Meaning it does not have to be connected to the internet.

You can put in a localhost for example: 127.0.0.1, 127.0.0.2 or other DNS as you please.
You just have to put the switch for a connection ON to run Y2JB with relapse. See image below.

View attachment 600319

Post automatically merged: Oct 31, 2026

Only setting a primary DNS is suffient in this case. No need for a fallback. But you can also choose one of the above ^^ if you don't want to set a localhost DNS.

So that's already the case

I do have 127.0.0.1 as my primary DNS. No secondary DNS. And I'm using Y2JB Autoloader instead of Webkit Autoloader as of today. With Webkit, I was using the DNS 45.56.67.85.

But I followed a tutorial by someone (I can't remember who) and they recommended 127.0.0.1 for Y2JB Autoloader with NanoDNS

br0ke23 · Oct 31, 2026

Same here. Just today I finally got it working. But i use my own adguard with blacklist ps. Now onto autoloader and then gaming. 4.50 here

PS5 Hack Status:

Preparing Your Console:

Select Your Jailbreak:

Additional Information:

Warnings:

Archived Information

Well-Known Member

v0.1.0​

Member

Member

Editorial Team

The Treasure Tracker

Fickly Member

The destroyer of worlds

Well-Known Member

Well-Known Member

New Member

The destroyer of worlds

ps5-webkit-autoloader v0.7.0 pre-release 2​

Attachments

Well-Known Member

ps5-webkit-autoloader v0.7.0 pre-release 2​

Well-Known Member

Well-Known Member

NO GODS. NO KINGS. ONLY MAN.

Member

The destroyer of worlds

Well-Known Member

Well-Known Member

Well-Known Member

Similar threads

Popular threads in this forum

v0.1.0

ps5-webkit-autoloader v0.7.0 pre-release 2

ps5-webkit-autoloader v0.7.0 pre-release 2