Visit: ntfargo's repo
## Overview
The PS5 Relapse Exploit is a major kernel exploit released by developers like ntfargo. It enables a temporary jailbreak for PlayStation 5 (Standard, Slim) and PS5 Pro consoles running on system firmware versions 7.00 through 13.60.
Sony patched this vulnerability on September 16, 2026, with the release of Firmware 14.00. Because the PlayStation 5 does not support firmware downgrades, updated consoles cannot use this exploit.
## Key Technical Details
- The Mechanism: Relapse chains a WebKit browser vulnerability with a kernel race condition to achieve kernel-level Read/Write privileges.
- Console Support: Works on all PS5 hardware revisions. Since the PS5 Pro originally shipped with pre-14.00 firmware, most current retail units are vulnerable out of the box.
- Speed & Performance: It is significantly faster than previous methods, triggering within seconds. However, it is not permanent (it must be re-run every time the console reboots) and can occasionally cause system crashes (Kernel Panics).
- Payload Compatibility: Includes a built-in ELF loader and supports essential homebrew tools like etaHEN, kstuff, and ShadowMountPlus.
## How it works (Quick steps)
The community typically hosts this exploit via custom DNS servers to redirect the PS5's hidden web browser:
- Network Setup: Users manually change their primary DNS in the PS5 network settings to a community host (e.g., 45.56.67.85).
- Triggering the Host: Navigating to Settings > User's Guide, Health & Safety > User's Guide opens the custom exploit host page.
- Running payloads: Running the exploit opens an ELF loader on port 9021, allowing users to send payloads like etaHEN to enable homebrew features..
## WebKit Autoloader (itsPLK's repo)
WebKit exploits are usually loaded by pointing your PS5's DNS at some server hosted by someone on the internet. That means you're putting your trust in whoever runs that server — and if it goes down, changes, or disappears, your setup breaks.
This autoloader does it differently:
- Fully offline, no third-party DNS. After a one-time install from your PC, everything is served straight from your PS5. There's nothing external to go down or change behind your back. Firmwares 12.02–13.60 run Relapse, which requires an active network interface (Wi-Fi or Ethernet connected to a local network; Internet access is not required).
- One-time setup, then a homescreen shortcut. Once it's installed, you don't need a PC or the internet — just launch "WebKit Autoloader" from the homescreen and you're done.
- Payloads loaded the way you already know. After the exploit chain runs, your payloads are sent just like in Y2JB / BD-JB / Lua autoloaders — via Payload Manager, or a custom autoload.txt..
I'm not responsible for any kind of damage on your PS5! Use it at your own risk!
## Contributors
Massive credits to the following:
Sonic_Iso: Kernel Exploit
Jordy: Webkit Exploit and Kernel Bug
ntfargo: Exploit Dev
ufm42: Exploit Dev
Dr. Yenyen: Testing
TheFlow
SlidyBat
Flatz
cow
nhk
bollarz
Sleirsgoevy
EchoStretch
EarthOnion
idlesauce
john-tornblom
Mark Adler
Everyone else contributing to the PS5 homebrew scene.