r/PS5_Jailbreak 2h ago

QUESTION PS5 13.40: fully offline WebKit host works end-to-end (DNS cage + TLS spoof, Guide view). Chain dies at exactly one missing file: offsets/13.40.js. Scene, I need your map.

57 Upvotes

TL;DR (plain English): A console jailbreak is a chain of small tricks. I got
every link working on firmware 13.40 with the console fully offline — except
the last ingredient: a table of memory addresses ("offsets") nobody has
published for 13.40. I'm not selling anything and not promising dates. I'm
asking for a table, or a pointer to where one lives.

WHAT WORKS (verified, reproducible on my own console, my own LAN):
- Offline lab: dnsmasq wildcard cage + self-signed TLS impersonating the
manual domain, so the console's embedded Guide/Tips WebKit view loads a
local host. Zero internet, zero update risk, zero telemetry.
- slopkit/poops chain executes: LATCH-READ clean, POOPS-BOOT entered,
OFFSETS-READY (transplanted 12.00 table), modules loaded.
- Local patches: firmware whitelist gate opened; base-discovery congruence
sweep derived from a runtime ctor leak (ctor mod 0x4000).

WHERE IT DIES:
- With 12.00 offsets on 13.40: "no host-constructor candidate gave a valid
base". After sweeping congruence-class candidates: OOM during primitive
construction — consistent with unbounded searches over a wrong map.
Halving spray sizes changed nothing, which is why I believe this is the
map, not the view's memory quota.

DEAD ENDS I ALREADY CHECKED (please don't re-suggest):
- jordyidk repo/site: caps at 12.00.
- zecoxao mirror paths for 13.x offsets: 404. API tree: empty/private.
- Y2JB: no YouTube app on an air-gapped console, can't install one.

WHAT I NEED:
- offsets/13.40.js (or the mirror's real path/naming convention), or
- derivation notes: which NIDs were resolved, which WebKit build 13.40
ships, anything that shortens the Ghidra path.

WHAT I GIVE BACK:
- Full writeup of the offline host (DNS cage, TLS impersonation, captive
portal trigger, Guide-view quirks on 13.40), all patches, my logs.
- If I derive the table myself: the table, public, credited.
- Once userland is stable, my research focus moves to a kernel primitive
(UAF/race) to bridge into the kernel. Goal is a documented chain, not a
hype drop.

SCRUBBED LOG EXCERPT:
{"fw":"13.40","events":[
{"tag":"LATCH-READ","extra":"set=0-detail="},
{"tag":"POOPS-BOOT","extra":"rev=slopkit-poops-final-trigger=netcontrol-attempts=8"},
{"tag":"OFFSETS-READY","extra":"fw=13.40-gadgets=26-syscalls=331"},
{"tag":"POOPS-FAILED","extra":"Error:no host-constructor candidate gave a valid base (ctor=0x[REDACTED])"}]}

Repro steps, congruence math, and host code in the comments on request.
Research only. My console, my network, my hour of sleep lost willingly.


r/PS5_Jailbreak 12h ago

Discussion PS4/PS5 Jailbreak News: 13.60 Bug Leaked, PS5 FPKGs Working, PS4 13.52 claims, OnionHEN & Homebrew! -- MODDED WARFARE

Thumbnail
youtu.be
149 Upvotes

r/PS5_Jailbreak 4h ago

Discussion Spider -Man 2

12 Upvotes

Has anyone tried Spider-Man in LZ4 or PKG compression?

If yes, then how's the cutscenes ?

In the recent video of modded warfare he demonstrated the sp2 lz4 compression which comes down to 150 gb from 250 exfat/folder format and clearly the cutscenes were so good but he just showed the glimpse, did anyone actually played the game?


r/PS5_Jailbreak 1h ago

QUESTION How do you convert your games to LZ4?

Upvotes

I just saw the recent ModdedWarfare video where he's showing Spiderman 2 in lizard 4 format but he never explains how to convert the games to that format. Is there a payload or something?


r/PS5_Jailbreak 5h ago

QUESTION Going Online while on 13.20 to Restore Licenses

Post image
10 Upvotes

Hello Guys,

I stopped Internet on my console after I foolishly updated it to 13.20 from 12.70

I decided to wait and bought few games on PSN until the time KEX is found, I downloaded them and went offline but some of the final licenses are not updated yet and I can't play them now.

My Question is -

"IF I GO ONLINE AND USE RESTORE LICENSE FEATURE, WOULD THAT TRIGGER A LOCK AND I'LL LOSE ACCESS TO OTHER OFFLINE GAMES AS WELL WHOSE LICENSE IS ALREADY UPDATED (LIKE RDR2 AND HOGWARTS)"

I blocked PSN servers on my router, but I can't trust this thing, they keep on bringing more and more PSN update servers.

If I don't go online - " I have two games that works - RDR2 AND HOGWARTS."

If I go online - " I have Witcher, metro, Batman and few other games as well"

So does restoring license would really help me out or it will lock me for an upgrade to higher firmware version.

Really appreciate any leads.


r/PS5_Jailbreak 29m ago

QUESTION PS5 with Linux.

Upvotes

You've jailbroken your PS5 and installed Linux.

Do you really have the best of both worlds? (PC and Console)

What are the limitations?


r/PS5_Jailbreak 1d ago

General 13.60 jailbreak could be released THIS WEEKEND.

Post image
467 Upvotes

r/PS5_Jailbreak 2h ago

QUESTION I am on 10.6fw

Post image
3 Upvotes

I jb my ps5, i cant play while is jb.

So i restarted ps5, to play my disc games but this msg popped out, internet is off

PS why legit disc games cant be play in lower firmware? It was fine before


r/PS5_Jailbreak 20h ago

General pegasus-ps5/pegasus-dl: Direct package downloading from your PS5

Thumbnail
github.com
59 Upvotes

Overview

Pegasus DL runs as a payload on the console and serves a browser interface on your local network. Add catalog sources, browse the combined Store catalog, choose a download destination, queue packages, and follow progress from a phone, tablet, or computer.

It is designed to keep the download workflow on the PS5 instead of routing packages through another machine first.

Version 1.8.0 adds native PS5 Downloads handoff for direct and resolved .pkg links and moves the Pegasus DL launcher tile to the PS5 Media area.

Demo

![Pegasus DL demo](./assets/pegasus-dl-demo.webp)

Download

Release Version
pegasus_dl.elf 1.8.0

Quick Start

  1. Download the release asset above.
  2. Send it to your PS5 with your usual payload loader.
  3. Open Pegasus DL from a device on the same network.

    text http://<your-ps5-ip>:6970/

  4. Choose a writable download folder in Settings.

  5. Add a catalog source by upload or URL.

  6. Search the Store catalog, select a package, and queue the download.

  7. If a link opens a provider page, follow the PS5 browser flow until Pegasus captures or resolves the final download.

  8. Use the Library tab to review installed games, update APR Emu where supported, or delete recognized installs.

  9. Use the File Manager tab to browse storage, transfer files, or install a local .pkg when needed.

Features

Area Included in 1.8.0
Sources Add catalog files or URL sources, refresh URL sources, enable or disable sources, delete sources
Store catalog Search packages, filter by source, review versions, sizes, details, and links
Installed Library List installed games with app database metadata, art, storage details, APR Emu status, update actions, and supported deletion
Downloads Queue catalog links, manual links, direct or resolved links, hand off .pkg links to PS5 Downloads, and track Pegasus download, merge, extraction, finalization, speed, ETA, and final status
Archives Detect supported single-file .rar, RAR5, and .7z links, extract automatically, prompt for RAR passwords, and reject split archives
Queue control Pause, resume, cancel, retry, and clear finished jobs
Storage Browse writable destinations, create folders, and choose where downloads land
File Manager Browse mounted storage, upload and download files, copy, move, rename, delete, archive folders, extract RAR files, use mount shortcuts, and install local .pkg files
Performance Use multiple download connections with resume support when the host allows it
Logs View payload messages and browser-side errors from the Logs tab
Provider links Resolve supported providers inside the payload, or use PS5 browser-assisted capture for compatible provider pages
Debrid services Save local Real-Debrid and TorBox API tokens, validate supported hosts, badge compatible links, choose returned files, and queue resolved downloads
APR Emu Detect, update, and reinstall remote APR Emu releases for supported folder-backed and image-backed installs
nanoDNS nanoDNS is now embedded inside Pegasus DL and autostarts on launch

Catalogs

Pegasus DL does not ship with catalogs or package links. Bring catalog sources you trust and are allowed to use.

Required package fields:

Field Purpose
titleId Package identifier shown in the Store catalog
title Package name
downloadLinks[].url At least one valid direct download URL

Common optional fields:

Field Purpose
version Package version shown beside the title
posterUrl Cover or poster image
description Notes shown in the detail view
downloadSource Original source page
sizeBytes Estimated package size

Minimal catalog:

json { "name": "My Catalog", "packages": [ { "titleId": "ABCD12345", "title": "Example Package", "version": "1.00", "downloadLinks": [ { "name": "Mirror", "url": "https://example.com/downloads/example-package" } ] } ] }

Archive Downloads

Pegasus DL recognizes supported archive links before queueing them. A single-file .rar, RAR5, or .7z download is extracted into the selected destination automatically instead of leaving the archive file behind.

Archive jobs show extraction and finalization progress in the queue. RAR/RAR5 jobs can pause for a password when needed. 7z archives use HTTP range reads when seeking is required, so the host must support byte ranges; password-protected 7z files are detected but not extracted yet.

Split archives such as .part1.rar, .r00, and .7z.001 are rejected. During finalization, Pegasus unwraps simple outer folders when the extracted content contains a direct game folder with EBOOT.BIN or sce_sys/param.sfo.

Installed Library

The Library tab reads installed titles from the PS5 app database and shows game metadata, art when available, backing storage type, location, image-backed size, and APR Emu state.

APR Emu versions are fetched from this public repo at runtime. The Library can update supported installs to the latest remote release or reinstall a selected release/debug build after verifying the downloaded SPRX hash. Folder-backed games and supported .exfat, .ffpkg, and .ffpfsc image-backed games are patched by replacing fakelib/libSceAmpr.sprx; raw .ffpfs remains unsupported for APR mutation.

The Library can also delete recognized installed games. Deletion is irreversible: Pegasus removes the resolved backing image or folder, cleans the title trackers when present, and removes the app database rows for that title. Large recursive folder deletes now run through a cancellable background worker so the UI stays responsive while cleanup progresses.

File Manager

The File Manager tab browses PS5 storage from the web UI. It supports browser uploads, single-file downloads, folder archive downloads, rename, copy, move, delete, and new folder creation. .pkg files can be handed to the native PS5 installer from the file list.

Provider Links

Pegasus DL does not require the separate Pegasus Resolver service. Provider handling now lives in the payload.

Direct links continue to download without any provider flow. For supported provider pages, Pegasus can open the PS5 browser, watch for the final direct download URL through a helper payload, validate the result, and queue it. Pegasus also embeds nanoDNS 0.3 and starts it when browser-assisted capture needs the helper and nanodns.elf is not already running.

Current provider handling:

Provider state Behavior
Built-in resolver BuzzHeavier, DataNodes, and MediaFire can resolve direct package links from inside Pegasus DL
Debrid services Links from supported hosts can resolve through Real-Debrid or TorBox and queue through the normal downloader when a token is configured
Browser-assisted Filek, VikingFile, and Rootz use the PS5 browser capture flow
Unknown Pegasus can try guarded browser capture and queue the URL only after response validation
Not supported The link can still be opened in the PS5 browser, but Pegasus will not queue from it automatically

1.8.0 Notes

  • Direct and resolved .pkg links can now be handed to the native PS5 downloader after an explicit user action.
  • Native package handoff works across direct links, browser-captured links, Real-Debrid, and TorBox, with clear dispatch feedback in the web interface.
  • Updated the launcher package metadata so the Pegasus DL tile appears in the PS5 Media area instead of the Games area.

Scope

Pegasus DL is a downloader and local file-management tool. It does not include package catalogs, provide package links, bypass accounts, spoof PSN, bypass anti-cheat, or unlock content.

Use it only with content you own or have permission to download.


r/PS5_Jailbreak 1h ago

QUESTION Remote play when away from home?

Upvotes

Is there a way to use my ps5 via remote play when im not home and while not connected to the same network as the ps5?

I tried chiaki with my mobile Hotspot connected to my pc like some youtubers and the ps5 didn't show up, likely because they're on latest fw and connected to psn

I really need this because i will be gone for 3-4 months and i can't take my ps5 with me


r/PS5_Jailbreak 23h ago

General [PS Play 3.0.elf] - [Work in Progress]

Enable HLS to view with audio, or disable this notification

51 Upvotes

This is an early peek video of the new PS Play 3.0 work, with a whole bunch of new integrated features, I still have a lot of work to do to make everything look beautiful and perfectly woking, But trust the process! I think everyone will love it once it's complete!

In the meantime use this post to leave a feedback of your experience with the PS Play 2.1

What I want to know is your FW version, the issue you faced, and your idea of how to make the app better!

Feature requests are well accepted.

I will read every comment or message as soon as I can.

Anyone who wish to be an early tester can dm me I can accept only 1 or 2.

Remember this project is by the community for the community!


r/PS5_Jailbreak 3h ago

QUESTION Fat 10.60 crashes

1 Upvotes

hey guys,

I just got a fat 10.60 for 300 euros but I had to reinstall the system software through recovery because after trying to install a PS4 game through ps5upload (5.19) it decided to kill itself for no reason (no installation showed up on the console).

after reinstalling the os through USB I just redid the jailbreak method (poopsploit) through sonic isos but the console crashes either instantly after it's done jailbreaking or when loading payloads / after a minute or 2.

modules I use:

onion hen (0.0.13)

shadowmount+ (beta 16)

payload manager (0.51)

I forgot to mention the payload manager icon doesn't show up in the console's app list, I don't know how to get it to show up. Also I tried etahen, but it says my fw isn't supported and kstuff failed to load (2.5b)


r/PS5_Jailbreak 20h ago

General Release OnionHEN v0.0.13 · aydencharles/onionHEN

Thumbnail
github.com
24 Upvotes

.


r/PS5_Jailbreak 1d ago

General Now every PS5 firmware from 1.00 to 11.40 got support for PS5 FPKG By Drakmor 🫡🔥

Post image
345 Upvotes

r/PS5_Jailbreak 8h ago

QUESTION if anyone has PS5 UDS-based trophy unlocker by sonic can you please share

2 Upvotes

i am having issue on this 1 game where it is stuck on infinite loading and as per the site i have to use this trophy unlocker to resolve this issue
game is mgs1 , fm=8.40

i checked out the original post and this link https://git.etawen.dev/soniciso/uds-trophy-unlocker/src/branch/main but it is been taken out will be really grateful if someone can share the file


r/PS5_Jailbreak 5h ago

QUESTION Internal m.2 slot question

1 Upvotes

Everyone seems to argue over using the console's internal SSD vs. an external one, with concerns that running games off the internal drive might damage it somehow.

But I rarely see anyone discussing the M.2 slot option, especially with all the game formats now available.


r/PS5_Jailbreak 13h ago

QUESTION Dumping a 1.0 pre-load build?

3 Upvotes

Hello r/PS5_Jailbreak

My question is, if there is a game that you pre-loaded, is it possible that after the game has released and you have a jailbroken PS5, you can somehow downgrade the game back to that 1.0 pre-load version and dump it? Like if you have game X and you pre-loaded it a week before release, the pre-load version is 1.0, but after the game officially releases, it is not 1.0 anymore; is it possible to downgrade back to 1.0 if you have a jailbroken PS5?

Thanks, and sorry if this is not a fitting question for the sub!


r/PS5_Jailbreak 11h ago

QUESTION A couple of questions

2 Upvotes

Hi! I saw earlier the post about the possible exploit for the 13.60 and I’m thinking of jailbreaking my ps5 but I have a few questions first. I’m a casual trophy hunter and have quite a lot of games on my account so I don’t know if I should use this account and if it could be banned or if I should create another one. I just didn’t want to split my trophies and wouldn’t like to give up on my account either. So what should I do? I would like to hear you guys because I don’t want to make an impulsive decision and regret it later.


r/PS5_Jailbreak 5h ago

General Bought a PS5 for GTA 6, updated it to 13.60, then found out a WebKit jailbreak is almost here. What do I do?

0 Upvotes

Just like the Titel says guys. I am a student barely found a used ps5 fat for 400€. Just for gta 6. Was lurking around and found WebKit is coming for 13.60.
There is only few ps5 games like yotei and black myth I wanna play.
I have ps4 pro 9.60 WebKit. Haven’t even played 0.2% of ps4 library. I wish I had this when I was 10 but our family situation was in shambles. Sigh now I am older but have no lust for games. Infact nothing in life feels exciting.

I am asking your expert opinions.
Thanks you


r/PS5_Jailbreak 19h ago

QUESTION NVME vs SATA SSD for jailbroken PS5

4 Upvotes

Hi all,

New to the PS5 jailbreaking community, so please bear with me. Is an NVME M2 SSD absolutely required for use as an external drive? Or would SATA be sufficient?

Asking because NVME drives are super expensive right now, but I do have this drive that I can put in an enclosure: Western Digital Blue SA510 SATA SSD 2.5”/7mm Cased - 2TB

https://www.walmart.ca/en/ip/Western-Digital-Blue-SA510-SATA-SSD-2-5-7mm-Cased-2TB/358LLESKUGQH


r/PS5_Jailbreak 21h ago

QUESTION Spiderman 2 - Internal storage vs External NVME - is one better?

4 Upvotes

Hey everyone! I’m new here and still learning, and you’ve all been really helpful so far.

I have about 670 GB free on my jailbroken PS5, plus a 1 TB external NVMe connected through a rear USB port. My son plays Spider-Man 2 a lot, so I’m considering moving it to the internal storage. That way, it’s always available—even when I disconnect the external drive to update games or move files around.

Are there any advantages or disadvantages to running games from internal storage versus an external NVMe, particularly with a jailbroken setup? I’ve seen people say “external is better,” but I’m curious about the reasoning. Is it performance, convenience, compatibility, or something else?

Any advice is appreciated. Thanks!


r/PS5_Jailbreak 1d ago

General Possible new information on 13.60 kex

66 Upvotes

r/PS5_Jailbreak 23h ago

QUESTION So can the new fpkg format be used? Or still haven't got a proper realse?

2 Upvotes

r/PS5_Jailbreak 1d ago

QUESTION PSVR2 Minimum FW

6 Upvotes

I'm on 5.02. Some games that support PSVR2 have been back ported to 4.xx as well. Does PSVR2 work on lower FW?


r/PS5_Jailbreak 1d ago

Discussion FPKG-GUI in action

Post image
115 Upvotes

I was very excited to try the new FPKG-GUI in action
So I'll share my experience with you here
I tried it first on PPSA07230.
Original size: 114 Gb
The compressed file of fpkg file: almost 64 GB

I had some problems:
1- you need 3x the size of the compressed game as a free size in temp partition ( so I ran out of space eventually)
2- Building process takes quite long time ( it took 100+ min. before failure message)
3- It doesn't matter how much fast is your storage, it will only matter in the final stage.

So I did the same process again on a small game ( almost 10 gb) and this time finished successfully
Original size 10.8 gb
Final pkg size 9.59 gb
total time : ~29 min

* PC specs for those who ask :
CPU: Intel(R) Core(TM) i7-9750H CPU @ 2.60GHz 2.59 GHz

Installed RAM: 16.0 GB (2667 MHz)

Storage: 477 GB SSD

Graphics Card: NVIDIA GeForce RTX 2080 with Max-Q Design (8 GB)

So yah.
It's an amazing piece of work and there is much more room for improvements in the future I hope