PS5折腾重要进展

PS5 HACK STATUS（当前折腾进展）: Golden FWs: 2.50 = etaHEN/Kstuff+HV exploit 4.50 = etaHEN/Kstuff (PS5/PS4 backups, possible HV exploit) 5.00-7.61 = etaHEN/Kstuff (PS5/PS4 backups, no HV exploits) 8.00-10.01 = (KEX but no HEN/Kstuff yet) Recommended host: https://zecoxao.github.io/luasauce/ (UTMX2 with Lua and WebKit for 1.xx-5.xx) Hypervisor（虚拟机漏洞）: Highest Private HV exploit: 4.51 (FlatZ) Highest Public HV exploit: 1.00-2.70 (byepervisor Specter) *unreleased Kernel（高权限内核漏洞）: Highest public KEX: 1.00-7.61 (UMTX) + 1.00-10.01 (Lapse) KEX offsets found: 1.00-10.01 Kstuff Released: 2.00/3.XX-7.61 Highest Private KEX: 10.40 (UAF by the flow) *unreleased/incomplete Userland（低权限用户模式漏洞）: Lua entry point: 2.00-LATEST BD-JB: 1.00-7.61 (Jar loader 4.1.1 + debug + UMTX2) Webkit: 1.00-5.50 (PSFREE +UMTX2) (New WebKit is required for 6.XX-10.01) Mast1C0re: 1.00-7.61 (PS2 backups) PPPWN: 1.00-8.20 (mitigations on PS5) *unreleased LuaLoader compatible games: Nora Princess and Stray Cat Heart HD (CUSA13303) IxSHE Tell (CUSA17112) Raspberry Cube (CUSA16074) Aibeya (CUSA17068) Hamidashi Creative (CUSA27389) Hamidashi Creative Demo (CUSA27390 Requires latest firmware to download from PSN) Aikagi Kimi to Issho ni Pack (CUSA16229) Aikagi 2 (CUSA19556) LuaLoader: HERE Elf loader: 7.61 HERE (use with BD-J) Game dumping: Up to 7.61 (self decryptor) latest HERE Game backports: Now Possible Homebrew Enabler（自制软件启动器）: etaHEN (3.XX-6.50) latest HERE (7.XX in testing) PS5 backup loading（PS5 备份加载）: Itemzflow for 3.XX-6.5X HERE PS4 backup loading（PS4 备份加载）: FPKG Enabler 3.XX-7.61 (rest mode & backports work, can crash). PS5debug released（PS5 调试工具发布）: HERE PS5 trainers/cheats（PS5 作弊工具）: Work PS5 dumping: 3.XX-7.61 works with most games, use Itemzflow or self decrypter. UART: HERE Full chain exploit（完整链漏洞）: 1.00-2.70 (byepervisor) Linux: Working with Fakexen (4.03) PSN access（PSN 访问）: NEVER Latest OFW: 11.20 (24/04/25) Latest beta OFW: 10.00 b2 (25/07/24) OFW Updates: HERE Legit PKG Updates: HERE UMTX: https://github.com/PS5Dev/PS5-UMTX-Jailbreak/releases/tag/v1.2 UMTX2: https://github.com/idlesauce/umtx2 UMTX 2 exploit works on 3.00-5.50 with WebKit: https://zecoxao.github.io/umtx/ or https://es7in1.site/ (games not working on 7.xx yet) PS5 Itemzflow compatibility list: Spoiler https://docs.google.com/spreadsheets/u/0/d/1TjOeFVNDR19ypTY2If099YOmllBaNsk4/htmlview Addresses to block to avoid updates: duk01.ps5.update.playstation.net fuk01.ps5.update.playstation.net dus01.ps5.update.playstation.net fus01.ps5.update.playstation.net feu01.ps5.update.playstation.net dau01.ps5.update.playstation.net fau01.ps5.update.playstation.net djp01.ps5.update.playstation.net fjp01.ps5.update.playstation.net sgst.prod.dl.playstation.net Alternative DNS IP: DNS 1: 172.245.146.114 (leave DNS 2 blank) Alternative hosts: http://es7in1.site/ https://zecoxao.github.io/ps5jb/ https://ps5jb.pages.dev/ https://sleirsgoevy.github.io/ps4jb2/ps5-403/index.html PS5 game updates: https://psxpatches.com/ Summarised OFW/Model guide: HERE 1.XX-7.61 game compatibility list: HERE Update OFW manually via USB by getting the firmware file from HERE and installing from :/PS5/UPDATE/PS5UPDATE.PUP SYSTEM UPDATES: 7.61 SYS MD5: d5eca8b171a8d7df7ba225167f77e645 (Exploited - No HEN Yet) 6.50 SYS MD5: 98db854ba47a75dff0cb09355bca9025 (Exploited - No HEN Yet) 5.50 SYS MD5: edb3513ec531b2bd28f3a0b52a82a54f (Exploited - No HEN Yet) 4.51 SYS MD5: 1330b7bf63bf5c93d809b1eb1f4e1f01 (Exploited + HEN) 4.03 SYS MD5: 3716e4e6e0d223cd94cd4a8e5bd4fb94 (Exploited + HEN) RECOVERY UPDATES (wipes all data): 7.61 REC MD5: 932f24e934723050fe49561b67e95226 (Exploited - No HEN Yet) 6.50 REC MD5: 4305223c12bd6dda9b944c0ee49c94c0 (Exploited - No HEN Yet) 5.50 REC MD5: c939ac8b37e07bbc129816a61002d30a (Exploited - No HEN Yet) 4.51 REC MD5: da78ca268da90a963d89b0f45db0f061 (Exploited + HEN) 4.03 REC MD5: e6dcc800d8d1dcada4f2bcd6e7ff162c (Exploited + HEN) PS4 GAME INFORMATION: OFW 1.xx cannot run PS4 games. OFW 2.xx runs PS4 games up to 8.03 OFW 3.xx runs PS4 games up to 8.52 OFW 4.xx runs PS4 games up to 9.04 OFW 5.xx runs PS4 games up to 9.60 OFW 6.xx runs PS4 games up to 10.50 OFW 7.xx runs PS4 games up to 11.00 OFW 8.xx/9.xx runs PS4 games up to 11.50 PS4 backported FPKGs also work perfectly on PS5! To determine your OFW version: Go to settings > system > console information. Version string info: Year.Half (1st/2nd half of the year)-Major Version No.Minor Version No.Extended info-Further Info.Retail/Debug 21.02-04.03.00.00-00.00.00.0.1 First BD-J + Kernel（高权限内核漏洞） access exploit provided by Sleirsgoevy (29/9/22) Note: There are several USERLAND（低权限用户模式漏洞） exploits, a couple of KERNEL（高权限内核漏洞） exploits, and there is now a public HYPERVISOR（虚拟机漏洞） exploits available for 1.xx-2.70 to complete the full exploit chain (23/10/24). Recently Flatz confirmed he has developed his own HV exploit (1.xx-4.51 which is kept private) which was chained from a PS4 save game, and has successfully dumped PlayStation Secure Processor (27/07/23). Spoiler: Hacking Timeline As of August 4th 2022: We can now install PS4/PS5 PKG games and updates (and by extension FPKGs) however official PKGs cannot be run unless you legitimately owned them previously digitally and have a licence for them on your current console, or if you own the disc (for update pkgs). As of October 6th PS4 FPKG can be played on 4.03 OFW thanks to Sliersgoevy FPKG enabler! Payload: https://gbatemp.net/download/4-03-fpkg-enabler-hen.38248/ As of October 21st PS4 FPKG can be played on 4.50 thanks to cheburek3000 porting offsets. Payload: https://gbatemp.net/download/4-50-fpkg-enabler-hen.38279/ As of October 25th theflow0 fixes BD-J path traversal and native code execution for 7.61 https://x.com/theflow0/status/1717088032031982066?s=46&t=PIYQV4jmWEyCbVfx3Nx26g As of November 4th ktuff is fixed for 4.51: Payload: https://gbatemp.net/download/fpkg-enabler-4-51-hen.38306/ Nov 7th PS5 backups loaded via Itemzflow by Lightningmodz and Echostretch. Fully decrypted dumps require system files bundled into them in order to run without crashing with Libhijacker (no hen required), details here: https://gbatemp.net/threads/ps5-exploit-guide.613891/page-109#post-10290677 As of November 30th ps5debug has been released by SiSTR0: https://github.com/GoldHEN/ps5debug Mirror: https://gbatemp.net/download/ps5debug.38333/ Dec 1st: first PS5 trainer (Dark Souls) is completed ready for the imminent release of REAPER Multi Trainer II by CTN. Dec 25th: PS5 back up loading via ITEMZFLOW now released: https://pkg-zone.com/details/ITEM00001 As of Jan 2nd 2024 Sleirsgoevy has ported K-Stuff offsets for 3.xx firmwares. As of Jan 4th 2024 LM had added 3.XX Kstuff to Itemzflow meaning 3.XX-4.51 is now supported for PS4/PS5 backups and dumping. Oct 8th 2024: BD-JB + Kernel（高权限内核漏洞） works on 7.61 thanks to user Hammer. 1: Never enable IDU mode. If you do you will need to enter staff mode by holding L1 + L2 and tapping this combo: circle, cross, square, triangle, right D-Pad. Release L1 + L2 and you can access settings to exit IDU. 2: Try to stay on the lowest FW possible and wait for hacks on that firmware. 3: PS5 FPKGs cannot work as a hack for the A53 processor does not publicly exist to enable installing PS5 content as FPKG/PKG. 4: Installing legit game PKGs you do not own will never work, even if spoofed. 5: If you get stuck in a boot loop at the PS logo the SNVS is corrupted (if the hash check fails on boot this causes a “soft brick”). It’s not “bricked”. Simply reinstall your current firmware RECOVERY PUP in safe mode. USB: PS5 > UPDATE > PS5UPDATE.PUP WEBKIT EXPLOIT: Webkit > Kernel（高权限内核漏洞） exploit chain for 3.00-4.51 via SpectreDev & ChendoChap: https://github.com/Cryptogenic/PS5-4.03-Kernel（高权限内核漏洞）-Exploit https://github.com/ChendoChap/PS5-IPV6-Kernel（高权限内核漏洞）-Exploit/tree/wip_branch 4.03 only: https://sleirsgoevy.github.io/ps4jb2/ps5-403/index.html BD-JB EXPLOIT: BD-JB > Kernel（高权限内核漏洞） exploit for 4.51 via Sleirsgoevy: https://github.com/sleirsgoevy/bd-jb/commit/159253464afde59c3007a706210bec65b91f38f3 UMTX Kernel（高权限内核漏洞） exploit 7.61 JAR loader by Hammer83: https://github.com/hammer-83/ps5-jar-loader/releases PS2 CLASSICS EXPLOIT: PS2 Classics > Userland（低权限用户模式漏洞） via CTurt: (Implementation by McCaulay) Note: this is currently limited to swapping the loaded PS2 iso, or loading PS2 elf homebrew on PS5 (or PS4) for emulators or basic PS2 brew. Spoiler: Mast1c0re files + links Mast1c0re PS2 exploit for PS2 homebrew: https://cturt.github.io/mast1c0re.html Mast1c0re part 2: https://cturt.github.io/mast1c0re-2.html Mast1c0re payload framework: https://github.com/McCaulay/mast1c0re Okrager save game exploit generator for Okage: https://github.com/McCaulay/okrager Mast1c0re payloader TCP Client GUI for PS5 6.50: https://github.com/Master-s/PS4-PS5-Mast1c0re-Payloader/releases TCP network ISO loader: https://github.com/McCaulay/mast1c0re-ps2-network-elf-loader/releases ExFat USB ISO loader: https://github.com/McCaulay/mast1c0re-ps2-usb-game-loader/releases Spoiler: PS5 Payloads 4.03 PAYLOADS: PS5 self dumper (Sleirsgoevy): https://github.com/sleirsgoevy/ps4jb-payloads/tree/bd-jb/ps5-self-dumper PS4 FPKG Enabler (Sleirsgoevy): https://gbatemp.net/download/4-03-fpkg-enabler-hen.38248/ MISC PAYLOADS + TOOLS: PS5 version display payload by SiSTR0 (compiled by Logic-68): https://github.com/logic-68/Portage_PS5Version_Mast1c0re/releases/tag/V1.0.0 Libhijacker (by Astrelsky): https://github.com/astrelsky/libhijacker 60 FPS patches for Libhijacker (by illusion0001): https://github.com/illusion0001/libhijacker Console/exploit information: PS5 SDK REPO: https://github.com/PS5Dev PS5 factory mode PUP installation path: /usb/PROSPERO/UPDATE/PROSPEROUPDATE.PUP You can install free/demo PKGS (legit pkgs) via debug pkg installer, providing you have all the files/json/licences required. (Astro’s Playroom has no licences and can be installed and played from official pkgs and update up to 1.60)

PS5 Jailbreak - PSGO.eu.org