PS5 Exploit Guide

TheDonmatic · Sunday at 8:42 PM

pokopia-runs-at-60-fps-on-ps5-jailbreak-via-eglantineps5-v0-g6cy2gt822zh1.webp

Pokémon Pokopia is running at 60 FPS on a jailbroken PS5. A new video posted today shows the Switch 2 game moving smoothly on the console. ProsperoEden with Switch 2 Games support is not there, but you can download EglantinePS5 that supports Switch 2 already.

More info:
https://onejailbreak.com/blog/pokopia-runs-at-60-fps-on-ps5-via-eglantineps5/

Eva888 · Sunday at 9:14 PM

SkiDDeR said:
After all this progress, has anyone found a way to bypass the Gen4 SSD check on firmware 8.00 and above?

I’d say it’s more like 5.xx and above.

------

disco_trooper said:
got it working.

the payload turns off the console's continuous "recent gameplay" recording.

works on 13.60. i haven't tried any other versions.

hush https://github.com/disco-trooper/hush

What does it actually do? Does it periodically clear a buffer used for video recording, or does it simply prevent the video from being loaded into the buffer at all?

--------

rull_bull said:
Sooo, is the key extraction vuln. for ps4 or ps5?
Guess it’s for ps4? As the bd-j exploit Zeco leaked was made by SaudiDos for the ps4..

Is that key exploit for PS4 or PS5? I like Zacex, and it’s a shame there’s some drama in the scene, but I think the fault really lies with him... As I understand it, a friend sent him something privately with the expectation that he’d keep it secret—but he ended up sharing it with strangers, using "research" as an excuse (though I might be wrong). In any case, it’s probably just PS4-related stuff, so it’s no big deal, in my opinion. The person who sent it to him should have anticipated that it might get leaked—whether intentionally or by accident.

HS2005 · Sunday at 9:36 PM

Remote Play Unlock

PS5 payload that bypasses Remote Play prohibition by patching SceRemotePlay (NPXS40102/eboot.bin) in memory. It covers the initial RP-Prohibit response, dynamic prohibition notifications, and audio/video protection-state computation.

The registry setting /REMOTEPLAY/ignore_prohibition is not present on retail 13.60, so this payload uses runtime instruction patches instead.

Branches

main: the simple payload. It uses hardcoded offsets for supported firmware versions and refuses unknown firmware.
testing: the offset-discovery payload. It always pattern scans, exports a decrypted eboot and a JSON report, and never modifies Remote Play instructions.

Built ELFs are ignored by Git. The main branch has a GitHub Actions workflow that builds and publishes remoteplay_unlock.elf to the rolling latest prerelease on every push.

Link: https://github.com/earthonion/remoteplay_unlock/releases/tag/latest-testing

cvskid · Sunday at 10:13 PM

Is it normal for so many of these new homebrew developers to either keep stuff private or show off projects only to not release them? Was it like this during other console homebrew scenes?

regex101 · Sunday at 10:24 PM

cvskid said:
Is it normal for so many of these new homebrew developers to either keep stuff private or show off projects only to not release them?

As I understand all hackers are basically on sony's payroll now. They can speak loud on twitter to boost ego, but they do only what the company allows them to do.

kam821 · Sunday at 10:43 PM

rull_bull said:
Sooo, is the key extraction vuln. for ps4 or ps5?
Guess it’s for ps4? As the bd-j exploit Zeco leaked was made by SaudiDos for the ps4..

I don't know what's going on between them, but running to Sony to complain doesn't look very professional.

cloudfe · Sunday at 10:44 PM

I'm following the recent posts on the (most) optimal setup for "adjusting" the PS5's connection to the WWW. But I'm still kinda confused...

Up until now I've blocked the PS5 connection directly at router level, but, given the recent developments like the ProsperoStore (and my router in needs of replacement), I'm thinking that maybe connecting the PS5 from time to time wouldn't be such a bad idea.

Considering the above, plus the fact that I'm on 6.02 using Y2JB (which I never want updated), what the best option would be? 127.0.0.1 as primary, 62.210.38.117 as alternative, plus nanoDNS? And then I just insert the ethernet cable whenever I need it?

TheDonmatic · Sunday at 11:23 PM

EglantinePS5 v1.000.000 Released — Experimental Switch 2 Emulator Port for PS5

https://github.com/mucahidkambur/EglantinePS5/releases/tag/v1.000.000

Eva888 · Sunday at 11:36 PM

A hypervisor bypass for Phantom Blade Zero already exists on PC, but on PS5—not only is that missing, but there isn't even a captured update patch for PS5 Prospero environment...

It goes to show that developers really won't just hand anything over—not even a simple update patch capture for retail game... and it will be exact same story with GTA VI

I’m only mentioning this so you don’t harbor any false illusions

kevin corms · Monday at 12:29 AM

kam821 said:
I don't know what's going on between them, but after reading his entire crusade like rant, I can imagine why Zeco called him bipolar.

Honestly, f anyone who uses that as an insult. Not that I want to get involved, but that’s just not cool.

Post automatically merged: Monday at 12:34 AM

Eva888 said:
A hypervisor bypass for Phantom Blade Zero already exists on PC, but on PS5—not only is that missing, but there isn't even a captured update patch for PS5 Prospero environment...

It goes to show that developers really won't just hand anything over—not even a simple update patch capture for retail game... and it will be exact same story with GTA VI

I’m only mentioning this so you don’t harbor any false illusions

It doesnt really show anything much at all, but yes dont just expect anything. Nobody owes it to us and nobody wants sony after them,

Vigilant_Veggie · Monday at 12:59 AM

Hello all, after nearly a year long break from the scene im tuning back in and trying to catch up on all the developments. i was using y2jb a year ago on my 7.61 and was having a good experience with that. but holy canary a lot has changed! and it keeps changing every day nearly, its hard to keep up with.

i guess i have one main question at the moment: with byepervisor reborn now released, will it eventually be fully ported to all applicable firmwares and thereby negate the need for k stuff? my understanding is that k stuff was needed bc of no HV, and that a HV exploit means better jb performance as well as more stable game patches (ie 60 fps patches for ps4 games). is this still the case? and has anyone been able to port it to 7.61 specifically?

thank you for the response, its hard to know what exact method is the best atm or whats coming in the future

hudhair · Monday at 1:06 AM

Sorry if this has been asked before but I might update for gta6 (im on 13.40). I have installed a youtube pkg and y2jb and have also used the webkit autoloader etc to jailbreak. Do i need to format my ps5 and then update to be safe? I just need to know how to safely update without getting banned.

ih8god · Monday at 1:42 AM

Hate to be a bother to y'all but I am having a bit of a tough time with my PS4 dumps. They are all my own purchased digital content on my PS5 running 13.42 with my account as primary and all work fine before and after running the relapse exploit and I don't have any licensing issues whatsoever.

I have used the ps5-app-dumper payload pretty much just as I did for all of my PS5 dumps which worked fine in the end but am surely missing something here. I get that the PS4 games will dump as folders, ok, and then I figured I would be able to just build the package with the usual set of tools and having not added or removed anything, the param.sfo would be fine and everything would just check out square with any of the playgo stuff too.

But no dice. The PS4 I am trying to run the pkg files made from the dumped folders is on 9.00 and it is not anything with firmware requirements that is causing it. Other files I can install fine. Tested other projects with the same build tools and they worked fine so it doesn't seem to be the PS4 pub tools or anything on that side.

Does someone know if there are specific settings with the app-dumper I should be using for PS4 games maybe or is is just broken or something and I should just do it a whole other way instead? Any help is appreciated accept for PKG Folderizer. Not sure why that dev wants people to connect to the internet through that app so badly but I am not lol.

ViRGE · Monday at 3:25 AM

cloudfe said:
I'm following the recent posts on the (most) optimal setup for "adjusting" the PS5's connection to the WWW. But I'm still kinda confused...

Up until now I've blocked the PS5 connection directly at router level, but, given the recent developments like the ProsperoStore (and my router in needs of replacement), I'm thinking that maybe connecting the PS5 from time to time wouldn't be such a bad idea.

Considering the above, plus the fact that I'm on 6.02 using Y2JB (which I never want updated), what the best option would be? 127.0.0.1 as primary, 62.210.38.117 as alternative, plus nanoDNS? And then I just insert the ethernet cable whenever I need it?

Routing your console through NanoDNS (127.0.0.1) in conjunction with patching appinfo.db is a perfectly fine way to go. If you want to keep the console unplugged when you don't need it, that's fine too. But when it is online, NanoDNS provides a sufficient degree of protection.

Vigilant_Veggie said:
Hello all, after nearly a year long break from the scene im tuning back in and trying to catch up on all the developments. i was using y2jb a year ago on my 7.61 and was having a good experience with that. but holy canary a lot has changed! and it keeps changing every day nearly, its hard to keep up with.

i guess i have one main question at the moment: with byepervisor reborn now released, will it eventually be fully ported to all applicable firmwares and thereby negate the need for k stuff? my understanding is that k stuff was needed bc of no HV, and that a HV exploit means better jb performance as well as more stable game patches (ie 60 fps patches for ps4 games). is this still the case? and has anyone been able to port it to 7.61 specifically?

thank you for the response, its hard to know what exact method is the best atm or whats coming in the future

Kstuff isn't going anywhere for the time being. While there are some things that a hypervisor exploit makes redundant, we still need kstuff to function as a homebrew enabler (or, really, a security disabler) to setup the PS5 environment to run things. Since we can't run a custom firmware, some kind of utility will continue to be needed to handle that.

It may not always be kstuff, but it will always be something.

As for hypervisor exploits, 7.61 already has one. Someone may eventually port Byepervisor-Reborn to it, though I don't get the impression that it is a high priority right now since it is not really needed.

hudhair said:
Sorry if this has been asked before but I might update for gta6 (im on 13.40). I have installed a youtube pkg and y2jb and have also used the webkit autoloader etc to jailbreak. Do i need to format my ps5 and then update to be safe? I just need to know how to safely update without getting banned.

Wiping the console is pretty easy to do. There is really no good reason not to do it in this case.

iguanoPT · Monday at 4:47 AM

kevin corms said:
Honestly, f anyone who uses that as an insult. Not that I want to get involved, but that’s just not cool.

Post automatically merged: Monday at 12:34 AM

It was Zeco who called himself bipolar

TheDonmatic · Monday at 4:54 AM

Sony has released yet another firmware 14.22. I'm guessing there will be at least one more before or right when GTA 6 launches.

Me celebrating because I'm on 14.20 thus no longer the latest firmware, as if I accomplished something.

Mc_Kuc · Monday at 5:34 AM

hudhair said:
Sorry if this has been asked before but I might update for gta6 (im on 13.40). I have installed a youtube pkg and y2jb and have also used the webkit autoloader etc to jailbreak. Do i need to format my ps5 and then update to be safe? I just need to know how to safely update without getting banned.

You can factory reset your PS5 and install the firmware with an usb stick in the recovery menu.
(Recovery firmware) to be 99,9% safe.

Some people say that it is enough to just go to the settings and factory reset it.

I know a guy who just conected it via ftp and deleted all the stuff he added after the jb.

SkiDDeR · Monday at 5:47 AM

Eva888 said:
I’d say it’s more like 5.xx and above.

------

What does it actually do? Does it periodically clear a buffer used for video recording, or does it simply prevent the video from being loaded into the buffer at all?

--------

Is that key exploit for PS4 or PS5? I like Zacex, and it’s a shame there’s some drama in the scene, but I think the fault really lies with him... As I understand it, a friend sent him something privately with the expectation that he’d keep it secret—but he ended up sharing it with strangers, using "research" as an excuse (though I might be wrong). In any case, it’s probably just PS4-related stuff, so it’s no big deal, in my opinion. The person who sent it to him should have anticipated that it might get leaked—whether intentionally or by accident.

If your talking about the 4 weeks old video with the img i tried it but without success on my 8.40

p0stal · Monday at 6:57 AM

I have a question i cannot find a definitive awnser for was the userguide exploit patched in 14.0 i tried booting it on a banned console for testing and it connected the the app on my pc but obviously would not run. Did sony block a way to run code through the exploit or is it still viable i have found conflicting awnsers.

Elrinth · Monday at 7:46 AM

I am on 13.40... I try start
kstuff wait 10 sec
shadowmount wait 10 sec
ftpsrv

says it is hosting on wlan... but i can't access it!? i try connecting via filezilla port 2121 which it says it hosted on... but never able to connect

PS5 Hack Status:

Preparing Your Console:

Select Your Jailbreak:

Additional Information:

Warnings:

Archived Information

Well-Known Member

Well-Known Member

The destroyer of worlds

Remote Play Unlock​

Branches​

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Attachments

Well-Known Member

New Member

:Master beyond your imagination:

Similar threads

Popular threads in this forum

Remote Play Unlock

Branches