Low Severity
Published: Oct 28, 2026
PS5 Exploit chain for PS5 7.00 - 13.60, credits: https://github.com/ntfargo/Relapse-Exploit
# PS5 Relapse Exploit
Supported firmware: 7.00 through 13.60.
> [!NOTE]
> **Upstream & Research Notice**:
> This project is originally created and maintained by **Nathan Fargo** ([@ntfargo](https://github.com/ntfargo) / [ntfargo/Relapse-Exploit](https://github.com/ntfargo/Relapse-Exploit)).
>
> This repository ([Github-Suriya/ps5-jb](https://github.com/Github-Suriya/ps5-jb)) serves as the initial copy and mirror of the site, preserved for future security research, testing, and development targeting upcoming PS5 firmwares (such as v14.00+).
## Usage
- In the network settings, set Primary DNS to `45.56.67.85` (Recommended)
- Run `python serve.py` locally, or open [https://ps5-jb.devsuriya.in](https://ps5-jb.devsuriya.in) on the PS5.
- The default payloads are stored in `payloads/` after a successful run, the ELF loader listens on port `9021`.
- After elfldr starts on port `9021`, you can press R2 to send `kstuff.elf`, `shadowmountplus.elf`, then `etaHEN.elf`.
## Stability notes
Webkit may need several attempts, reload the page if the browser stalls. The kernel exploit may hang or panic the console, so reboot before trying again if that happens.
## Exploit chain
Browser stage uses JSC info leaks and a structured clone object pool mismatch to corrupt a typedarray. The kernel stage combines an address leak with an `aio_multi_wait` uaf race to establish kernel r/w.
## Credits & Attribution
- **Original Project Creator**: Nathan Fargo ([ntfargo](https://github.com/ntfargo))
- **Research & Chain Contributors**: ntfargo, ufm42, Sonic-Iso, Jordy, Dr. Yenyen, TheFlow, SlidyBat, Flatz, cow, nhk, bollarz, Sleirsgoevy, EchoStretch, EarthOnion.
- **Mirror & Maintenance**: [Github-Suriya](https://github.com/Github-Suriya/ps5-jb)
## Disclaimer
This project is intended for **educational and security research purposes only**. It does not endorse piracy, unauthorized access, or misuse of commercial devices. Use it only on devices you own or are authorized to test, and comply wi