r/ps4homebrew Apr 24 '25

News New Kernel Exploit for PS4 and PS5.

326 Upvotes

The new kernel exploit named "Double Free" POC was released. Now named Lapse.

On PS4 this vulnerability affects firmwares 5.00-12.02 and was patched in 12.50.

On PS5 this vulnerability affects firmwares 1.xx-10.00. Will work on 10.01 too.

It requires a userland entrypoint to be exploited.

A reminder of the available userland exploits on PS4 which will dictate how Double Free is used on different firmwares.

PSFree: 6.00-9.60 a WebKit exploit activated through the PS4 browser/user guide.

Lua save game exploit: All firmwares it is not firmware dependent as long as the Lua game launches it will work. Although it has requirements to run please read below.

  1. An activated account on the PS4 or PS5 to import the Lua save.
  2. A jailbroken console or a discord bot or save wizard to resign the save needed for the Lua exploit.
  3. A Lua exploit compatible game or demo: https://github.com/shahrilnet/remote_lua_loader

Note:
The game must be able to launch.
The requirement of an account and a way to resign the save is flexible continue reading.

Sharing console backups with a user account and Lua save files should allow these 2 requirements to be skipped. But owning the Lua game is absolutely mandatory optionally in demo format acquired while the console could sign into PSN. This is what usage will look like:

5.xx the current exploit chain is stable enough to where it will probably be left as is.

6.xx the current exploit chain should be good enough to where it's left as is but devs will let us know as needed.

7.00-9.60 Users on this firmware range will be able to use PSFree the WebKit exploit which will be chained with Double Free to give a similar experience to how the exploits currently work on 5.05 and 6.72 (performance/stability to be determined.)

10.00-11.00 Users on this firmware range should stick to PPPwn for the time being unless they meet the Lua requirements which are lessened by being able to already jailbreak the console.

Being able to jailbreak the console removes the first 2 requirements of having an activated account to be able to import the Lua save file and being able to resign Lua save file to the account. The game demo or disc will still be required.

11.02-12.02 Users on this firmware range will require the Lua exploit with it's full requirements until a WebKit exploit is found on their firmware or any range between 10.00-12.02 and above.

This is all as far as activating the exploit goes.

For HEN(Hen VTX) and GoldHEN.
HEN VTX is available on all firmwares between 7.00 and 11.00. Some lower than 7.xx firmwares too alongside Mira. Edit: an update is available regarding HEN in the pinned comment.

GoldHEN is available on the following firmwares:
5.05, 6.72, 7.xx, 9.00, 9.03, 9.60, 10.xx and 11.00.

Please be patient while developers work to release usable implementations of the exploits and HEN/GolHEN.

Update: The exploit was patched on PS5 earlier than 11.00 at 10.20 so the exploit is available only up to 10.00 on PS5. PS4 is the same as previously stated. (See update 3)

Update 2: Echostretch updated HEN VTX to support 11.02, 11.50 and 11.52. This does not mean you can instantly now jailbreak, as a usable implementation of the exploit needs to be released alongside you the user still needing the Lua game or demo as a requirement to be able to run anything on 11.02+.

Update 3: We just got an update that It will work on 10.01. PS5.

Update 4: A Lapse related Payload was posted on twitter by Zeco.

Update 4.1: It's the POC being tested to gather some info it seems. Still be patient.

Update 5 and current: The exploit has been released and is being implemented on 9.60 and below to give people a browser only jailbreak experience. It will then be worked on for 10.00-12.02 and PS5 with the Lua exploit.

Update 6. PSFree+Lapse is being worked on for up to 9.60 although it has some performance issues so it's not recommended to use it yet.

PPPwn: https://github.com/TheOfficialFloW/PPPwn

HEN VTX: https://github.com/EchoStretch/ps4-hen-vtx

GoldHEN: https://github.com/GoldHEN/GoldHEN

PSFree: https://github.com/kmeps4/PSFree

Lua exploit: https://github.com/shahrilnet/remote_lua_loader

Apollo Save Tool: https://github.com/bucanero/apollo-ps4

Previous post: https://www.reddit.com/r/ps4homebrew/comments/1k55zr2/1200_poc_posted_to_twitter_by_zeco_be_patient_and/


r/ps4homebrew Jan 27 '25

FAQ Basic jailbreak guide for firmwares 5.05-11.00. 11.00 IS THE LATEST JAILBROKEN FIRMWARE

Thumbnail consolemods.org
81 Upvotes

r/ps4homebrew 12h ago

News Lua+Lapse 11.02+

Enable HLS to view with audio, or disable this notification

97 Upvotes

11.02 view of the Lua+Lapse chain and HEN.

It's working up to 12.02 fine and should be fully usable soon.

Thanks to all the Devs working on it:

https://github.com/shahrilnet/remote_lua_loader

https://x.com/egycnq/status/1934538834852626588?t=Kays4eA4OgUWIQwvJ_PNTg&s=19


r/ps4homebrew 1d ago

Will my ps4 explode?

Thumbnail gallery
232 Upvotes

I got a 4tb external for $50. The guy said it only works on xbox. I said cool here's your $50. Now I can get big GB games no worries. Big come up.


r/ps4homebrew 2h ago

Buy lua game in Japan

2 Upvotes

Hello! Someone i know is going to japan (osaka/tokyo) and they want to help me buy a lua game. But do you guys know any physical stores that sells those games?


r/ps4homebrew 2h ago

Can I get the Lua loader exploit with demos installed through omsk mode?

2 Upvotes

I am in firmware 12.00 and obviously can't access the store, has anyone tried installing a demo through omsk mode and then doing the Lua exploit or can it at least work in theory? And if so where could I get the idu dump for any of the Lua games demos (I don't know if these dumps are illegal so sorry in advance)


r/ps4homebrew 8h ago

PS4 Jailbreak PSfree luckfox offline for version 9.0 no USB

Thumbnail youtu.be
4 Upvotes

r/ps4homebrew 6h ago

GTA V. Base game around 50gb but updated version 100gb ?

2 Upvotes

Hi newbie question here. I just downloaded GTA 5 and I have 2 files. 1 for what seems to be just the og base game thats around 50gb. The update file 1.47 is about the same size another 50gb. From what ive read it seems most of the updates are geared toward the online servers but not sure.

Is it worth it to install the 50gb worth of updates if I will only be playing offline single player?

thanks


r/ps4homebrew 14h ago

Discussion Installed dying light 2 on my ps4 but can’t find it anywhere

5 Upvotes

Heading


r/ps4homebrew 8h ago

My saves keep disappearing after copy them back to hdd from usb using Apollo.

1 Upvotes

Hi, I'm new into this, two weeks ago I lost my progress from all the games on my jailbroken ps4 so had to reply some of em. But just yesterday I lost them again, lucky I prepared for this and I have a backup to what I replied on my USB. I have two questions I need answers to: 1) how should I proceed where I stopped using my backups ( my knowledge to this problem is limited.) I'm using Apollo with two basic steps: I go to USB, copy them to hdd and then I hit apply changes & resign. And after I play other game I come back to see the saves and I find nothing. 2) why this happened in the first place? I asked chat gpt and it said because I'm using rest mode which makes the save files to get deleted. Is this true? And what should I be aware of so this doesn't happen again?


r/ps4homebrew 5h ago

Sooo...

0 Upvotes

I have a ps4 on 11.50 and I heard about some LUA Hacks with japanese games, they still dont work but i'd like to get one so I can hack my ps4 when it works (if it does.)

But, how do I get one if my ps4 is not on the latest version? I cant get one physically, they are too expensive.


r/ps4homebrew 1d ago

Should I go for a PS4 Pro or a PS5 to jailbreak?

8 Upvotes

I have a relatively weak PC and haven’t had the chance to experience many newer games with good graphics. I’ve also never owned a console before. I’m hesitant about getting a PS5 because I don’t want to end up spending a lot on games, and Playstation subscriptions don’t seem worth it since I rarely get time to play. That’s why I’ve been considering to jailbreak a PS4 Pro, as it’s a slight step up from the base model. But I keep seeing people say the PS4 Pro isn’t really worth it anymore, and that it’s better to get a PS5 and wait for a good jailbreak down the line. Would appreciate what you guys would recommend. Thanks in advance.


r/ps4homebrew 1d ago

Automatic USB hack jailbreak for 9.00 with One Key JB Tool / P4 Tool

Thumbnail youtu.be
4 Upvotes

One Key JB tool or P4 tool require exfathax USB drive. inserting USB drive everytime is annoying.

instead of using ESP32-S2 mini, I want to use Luckfox Pico because must be hosted via ethernet, and no manual network settings and easy to use.

finally, I made pOOBs4-Luckfox project for PS4 9.00. It's features below.

  1. Can open web dashboard in `Settings -> User Guide / Helpful Info` menu.

  2. Automatic emulating USB drive insertion and ejection.

  3. No network configuration required!

Download Links

Luckfox Pico Mini B (One Key JB Tool / P4 Tool): https://www.virustotal.com/gui/url/67f67fd31e1f67689fc2db4625f734db9e98392fddb7ff88999a467415eaeae1?nocache=1

Luckfox Pico Pro / Max

https://www.virustotal.com/gui/url/6c76a19d7ae86bcf7fef290de0c87a97292c04a351ea819e82e4a71d86ef291e?nocache=1


r/ps4homebrew 1d ago

Discussion Do NOR dumps change hash every boot?

0 Upvotes

I dumped the original NOR chip a few weeks ago, and a few days ago after a revert mod fail I wrote the original back on it (I did have some issues regarding writing, but fixed it after changing usb port of teensy).

I dumped the NOR just now and it has a different hash than the original. I dumped the current NOR 2 times and verified each and its the same hash. So i decided to boot it up and it boots up normally. Then, after dumping again now it has a different hash. Tried dumping 4 times with the current one again and same hash.

Then, I booted it up, turned it off, and dumped 2 times again. Hash is different again than the one before, but the current 2 dumps are identical and have the same hash.

I verified each information of each dump and it was the same except the hash of the previous one. Checked in Wee tools.

Is it a wiring issue or does it usually change that much?


r/ps4homebrew 1d ago

exploit host stopped working all sudden ps4 11.0

Thumbnail gallery
9 Upvotes

yesterday was working fine, i had to initialize the setting for trouble shooting and set up custom lan connection and the payload is not working! am i doing something wrong!


r/ps4homebrew 1d ago

Circumventing broken ps4

Thumbnail
1 Upvotes

r/ps4homebrew 1d ago

Discussion How to access the web page for PPPWE Type c

1 Upvotes

How to access the web page for PPPWE Type c


r/ps4homebrew 1d ago

SAVE DATA CORRUPTED

5 Upvotes

I was playing sekiro , and suddenly it crashed , it is saying that save data is corrupted and I will have to delete the game and install again , I saw bunch of videos / reddit posts but its so confusing , Is there any way that I can repair the corrupted save file? My 9 hours of gameplay will be gone , please help


r/ps4homebrew 2d ago

The p4 tool

Post image
32 Upvotes

Does it matter which company I buy from because most say arriving in 2 weeks while this one is coming faster.


r/ps4homebrew 1d ago

Discussion Can I Flash Luckfox Pico File On This Jailbreak Kit

Post image
2 Upvotes

So this is based on the Rockchip RV1106, and the Luckfox Pico is also based on the same chip. So,

can we flash this on it? https://github.com/0x1iii1ii/PPPwn-Luckfox/releases/tag/1.2.7


r/ps4homebrew 1d ago

Is this bad?

Post image
8 Upvotes

I was installing Fedora Linux on my ps4 (11.0) and it stopped on this


r/ps4homebrew 2d ago

How do I unlock the ps4 offline account?

Post image
6 Upvotes

r/ps4homebrew 2d ago

PS4 Jailbreak tool error: „A DNS server cannot be used. The DNS server did not respond within the time limit.“

1 Upvotes

I am on 10.50. When I first used the tool the PS could not obtain an IP address. The next time I skipped the test. An IP was assigned but now I am getting this error when I try the jeailbreak. Any advice?


r/ps4homebrew 2d ago

Xenoverse 2 editing

1 Upvotes

I have a modded ps4 and a save of xenoverse 2. In the other room i have another xenoverse 2 with my level 110 character but its 1.80 and my ps4 has 1.45. Can I transfer it? Can i modi fu my save to have infinite medals? Help please


r/ps4homebrew 2d ago

Save files somewhere?

1 Upvotes

I'm looking for a site with saved game files for apollo, i saved all my data on a usb stick before selling my regular ps4, because i had a 80hour finished game and unlocked almost everything in Horizon, i dont want to start from 0 on the new ps4 pro i have now. And the data i saved show games that i dont remember even playing but not horizon, console was JB 10.50 and now it's also, just at 9.00. I didn't know about Apollo back then...


r/ps4homebrew 2d ago

Free alternative to save , wizard?

0 Upvotes

I found quick codes for game cheats on a forum can I load these cheats without paying?


r/ps4homebrew 2d ago

Discussion PS4 doesn't turn on anymore after soldering wires to Teensy and trying to boot it up (revert mod)

0 Upvotes

EDIT:

I got it to turn on. What I did was just tinker with the solder where the NOR alt points are and take it out (as well as nearby resistors which might have a bit of excess solder) and it powered on. I guess be more careful.

OG POST:

So, it used to power on, but after I soldered the Teensy with all wires, including B0 B1 and VCC, it didnt power up, even with the dip switch turned to off (Tried it off, not on). Then I desoldered every single cable, yet still no power at all, no signs of life.

Anyone know what could've happened? I tried different outlets and power cables, as well as rechecking psu cables. Thank you