Medium Severity
Published: Oct 25, 2026
W.A.K. (WebKit Automated Kernel) - A modular and fully automated exploit framework for PS5 7.00 - 13.60.
**W.A.K.** (**W**ebKit **A**utomated **K**ernel) 1360-Relapse is a comprehensive WebKit and Kernel exploit host designed for PlayStation 5 firmware versions ranging from 7.00 to 13.60.
Features
--------
* **Broad Firmware Support:** Dynamic offset loading for PS5 firmwares 7.00 through 13.60.
* **Prioritized Payload Injection:** Sequential execution of customized payloads defined via `payloads.json`.
* **Beautified Interface:** A clean, console-optimized UI experience.
Directory Structure
-------------------
├── assets/
│ └── index.css
├── index.html
├── offsets/
│ ├── 7.00.js to 13.60.js (33 offset files)
├── payloads/
│ ├── elfldr-ps5-1360.elf
│ ├── kexp_2026_05_25.bin
│ ├── kstuff.elf
│ ├── nanodns.elf
│ ├── OnionHEN.elf
│ ├── payloads.json
│ └── shadowmountplus.elf
├── README.md
├── serve.py
└── src/
├── firmware.js
├── helper.js
├── kexp.js
├── main.js
├── relapse_exploit.js
├── rop.js
├── site.js
├── utils/
│ ├── int64.js
│ ├── mem.js
│ ├── rop_slave.js
│ └── syscalls.js
└── webkit.js
Supported Payloads & Configuration
----------------------------------
By default, the host supports the optional activation of **kstuff**, **nanoDNS**, **OnionHEN**, and **ShadowMount+**.
To integrate additional payloads, place the relevant `.elf` files into the `payloads/` directory and register them within the `payloads.json` file.
**Configuration & Priority:** The order of the arrays in `payloads.json` strictly determines the payload injection priority. Based on the configuration below, `OnionHEN` will be executed first. The `"bolt"` string is simply a UI icon identifier and can remain static.
[
[
"bolt",
"OnionHEN",