PS5 Jailbreak

• A famous hacking group named Failoverflow and PlayStation screen veteran TheFloW have claimed that the PS5 console can be fully hacked.
• There is also a webkit that works on PS5, up to firmware 4.03, and a usermode ROP toolchain resultedly released. Another developer team named ZNullPtr claimed that they are still working on exploiting the PS5 console.
• TheFloW has been awarded by PlayStation recently for the PS5 console exploit.

All these facts are promising, but do not have any guarantee at the moment. The only usable tool to Jailbreak PS 5 at this time is the usermode ROP toolchain that is provided for PS firmware 4.03 or lower.

Hacking a system usually requires two main things. (1). A way to run unsigned code (the one we refer to as a usermode exploit usually on the screen of console hacking.) (2). And some sort of privilege rise from there to get complete control of the console (which is usually called a kernel exploit.) The benefits and drawbacks of how these two aspects are achieved can rely on the target device, but that is the substance of it. If we summarize the current status from the given paragraph above, we now have the usermode exploit (over a webkit vulnerability) up to firmware 4.03, and evidence that a rapid increase in the privilege is possible, though nothing has been disclosed on that feature. ZNullPtr has especially disclosed some security and mitigations in place to stop privilege escalation on the PlayStation: "They tried to make it similar to xbox security, where there is a HV + virtualized app container. So even if you get a kernel exploit, you can’t immediately pirate the games and apps. However, hypervisor locking up registers and other mitigations make it 100x harder to get there even" — ZnullPtr.

Most people are curious about the release date of the next piece of the puzzle. However, it is really hard to tell an exact date of releasing. Failoverflow have not released anything for public use in ages, and has stopped onself from being the "first" to reveal anything from the era of PlayStation 3. TheFlow has been continuously publishing his work to the scene, excluding the earlier PS4 Jailbreak, which he did not get permission for disclosure from Sony, or came to a decision that it was time to stop publishing stuff to the scene (the present vulnerability was found, exploited, and released by other developers.) In the same way, there is a possibility that the same thing will repeat in Jailbreak PS5, according to the recent news of $20’000 bounty. ZNullPtr appears to be assured that he could publish ase something related PS5 jailbreaking in the future if he gets to work. (This is our interpretation from what he tweeted in his Twitter account, not something he said directly).