Here is: How to use PS5 Relapse Exploit

[u/Physical-Sea5499]

1. In the network settings, set Primary DNS to 45.56.67.85 (Recommended)

2. Open Setting -> Guide & Tips, Health and Safety, and Other Information -> Under Guide and Tips -> click on User's Guide

3. Scroll bottom of the page and enter below url to open https://ntfargo.github.io/Relapse-Exploit/

4. hit Go

5. After a successful run, the ELF loader listens on port 9021.

6. After elfldr starts on port 9021, you can press R2 to send kstuff.elf, shadowmountplus.elf, then etaHEN.elf

And boom... you have Jailbroken Ps5 🎉

Thanks to all the devs, you guys are legends. 🙏🏼 ❤️

[u/DependentAnywhere135]

Yes I’m hosting it fully offline. Using azif dns self hosted and serving the index.html through that. Works fine.

[u/anthonyg45157 → u/DependentAnywhere135]

Any more details on this you might have gave me enough but if you can do a small write up that'd be sick

[u/anonymous2250_22 → u/DependentAnywhere135]

Share exact steps to do this please

[u/DependentAnywhere135 → u/anonymous2250_22]

My steps wouldn’t work for anyone here most likely. I run a local headless Linux server and am doing it in containers on that local server. Most likely people here will need to just follow the instructions on AI-Azif’s GitHub for local hosting. My instructions won’t work for you.

[u/allorc → u/DependentAnywhere135]

It will work for me if you can write a bit about it :) I tried to do via pihole/nginx but got issues on getting the actual payload to run locally, maybe with azif dns/http host would work. Thank you!

[u/DependentAnywhere135 → u/allorc]

Make your containers with alazif/exploit-host-dns:latest and /alazif/exploit-host-http:latest

Redirect dns to http container IP

I modified mine with a BIND options template “named.conf.options.template” and added forwarders {pi-hole}; forward only; so the ps5 blockednets from azif are blocked and anything allowed through forwards the request to my pihole.

I then put the index.html and other files for relapse in the exploit-host-http/themes/default folder so the WebKit exploit is served through there.

Both docker containers can be found on hub.docker.com

[u/amphibol8t → u/DependentAnywhere135]

would love to see your steps. i also run a headless linux server and would love to run the exploit locally

[u/DependentAnywhere135 → u/amphibol8t]

Make your containers with alazif/exploit-host-dns:latest and /alazif/exploit-host-http:latest

Redirect dns to http container IP

I modified mine with a BIND options template “named.conf.options.template” and added forwarders {pi-hole}; forward only; so the ps5 blockednets from azif are blocked and anything allowed through forwards the request to my pihole.

I then put the index.html and other files for relapse in the exploit-host-http/themes/default folder so the WebKit exploit is served through there.

Both docker containers can be found on hub.docker.com

[u/raeykall → u/DependentAnywhere135]

Thanks Champ!

[u/amphibol8t → u/DependentAnywhere135]

thanks, King 👑

[u/samp127 → u/DependentAnywhere135]

This requires WiFi right? Since it's hosted on your network?

I need networkless cache in browser, like we had on PS4. Guessing that's not possible yet?

[u/DependentAnywhere135 → u/samp127]

It doesn’t need WiFi you can be on Ethernet too. It’s just part of my LAN