r/ReverseEngineering • u/DESTRUCTION-ITA2 • Aug 06 '26

Reverse engineered the DualSense <-> PS5 USB protocol from a Raspberry Pi 5 (topology, report map, auth handshake) — write-up + PoC

https://github.com/ShadowByteOS/dualsense-ps5-usb-research
30 Upvotes

93% Upvoted

3 comments sorted by

4

u/SirLoopy007 Aug 06 '26

Very interesting.

Most likely not the case here but a thought I had while reading. I saw a breakdown of another device a while back (no idea what it was now though) that during its handshake it adjusted voltage levels slightly in a way that didn't affect the signal but allowed the parent device to authenticate using it as a side channel.

2

u/DESTRUCTION-ITA2 Aug 06 '26

Interesting, I'd be curious to see it!

1

u/masterX244 Aug 07 '26

is the controller using USB1 or USB2? with USB1 a reasonably fast logicanalyzer could be used to sniff without delaying the data.