ps5-webkit-autoloader README

The project's README from github.com/itsPLK/ps5-webkit-autoloader. As one markdown file: README.md.

PS5 WebKit Autoloader

 

Automatically loads the WebKit exploit and your elf payloads.
Supports firmwares 1.00–5.50 and 7.00–13.60.

WebKit Autoloader - exploit running Installer

Other Autoloaders:
Y2JB | BD-JB | Lua

Why WebKit Autoloader?

WebKit exploits are usually loaded by pointing your PS5's DNS at some server hosted by someone on the internet. That means you're putting your trust in whoever runs that server — and if it goes down, changes, or disappears, your setup breaks.

This autoloader does it differently:

Setup Instructions

There are two ways to set up the autoloader, depending on whether you're already jailbroken.

Already jailbroken? Just load the installer ELF

  1. Download webkit-autoloader-installer_vX.Y.Z.elf from the Releases page.
  2. Send it to your PS5 with elfldr, or launch it from Payload Manager.
  3. The installer opens the browser once to cache the autoloader page, then creates the WebKit Autoloader app on the homescreen and exits.
  4. Reboot once, then launch WebKit Autoloader from the homescreen.

Not jailbroken yet

If you aren't jailbroken yet, you'll need to host the exploit locally on your PC for the initial setup:

  1. Download webkit-autoloader-host.py (or the .exe) from the Releases and run it on a PC on your network.
  2. On your PS5, set your network's DNS server to your PC's IP address.
  3. Open the User's Guide from Settings to run the installer, which adds the WebKit Autoloader app to your homescreen.
  4. Launch WebKit Autoloader from the homescreen.

How to Use

There are two ways to configure payloads:

🟢 Option 1: Payload Manager

If no autoload.txt config is found, the autoloader will automatically launch Payload Manager — a fully-featured PS5 payload manager with a web UI. This lets you configure and send payloads directly from your browser, without needing to manually set up config files or transfer ELF files ahead of time.

Just run the autoloader — if there's nothing configured, Payload Manager starts automatically.

Note: Payload Manager also has its own built-in autoload feature, which lets you configure payloads to load automatically on startup — all managed through its web UI. This is separate from the autoload.txt mechanism described below.


⚙️ Option 2: Manual Config (autoload.txt)

For a fixed, automated payload chain, you can configure payloads manually:

Note: When an autoload.txt config is found, Payload Manager is not launched automatically. If you also want Payload Manager available, place pldmgr.elf in your ps5_autoloader directory and add it to autoload.txt.

Additional Info

How to update the autoloader?

The autoloader content is cached on the console, so updating is exactly the same as the initial install. Simply follow the Setup Instructions using the new release files.

The latest installer payload will re-create the homescreen app and refresh the cached page for you. Your payloads and autoload.txt on USB / internal storage are never touched.

How to use a custom ELF Loader?

On firmwares 7.00–13.60 (relapse), the autoloader uses a custom version of elfldr that only accepts connections from the PS5 itself (localhost). This improves security by preventing unauthorized devices on your network from sending payloads to your console. On firmwares 1.00–5.50 (umtx2), the stock elfldr is booted.

If you want to use a "normal" ELF Loader that allows sending payloads from any device, you can simply load it through Payload Manager.

Alternatively, if you are using a manual config file (autoload.txt):

  1. Place your custom ELF Loader (e.g. elfldr.elf) in the ps5_autoloader directory.
  2. Add elfldr.elf to your autoload.txt.
  3. Note: If you are loading other payloads right after elfldr.elf in your autoload.txt, add a sleep command immediately after it (like !4000 to sleep for 4 seconds) to give the new ELF Loader time to start up and listen before subsequent payloads are sent.

Example autoload.txt:

# Load custom ELF Loader
elfldr.elf
# Give it 4 seconds to start up (only needed if sending more payloads)
!4000
# Send other payloads
etaHEN.elf

For developers

The technical internals and project architecture are documented in ARCHITECTURE.md.

Credits

Disclaimer

This tool is provided as-is for research and development purposes only. Use at your own risk. The developers are not responsible for any damage, data loss, or consequences resulting from the use of this software.

License

This project is licensed under the GPL-3.0 License.

Donate

ps5-webkit-autoloader (itsPLK/ps5-webkit-autoloader)

Searching Database…

这是什么?它是一个面向已破解(越狱)PS5 主机的自动化 payload 加载器:它会启动 WebKit 漏洞利用链,然后自动发送你的 ELF payload,全部由主机主屏幕上的快捷方式触发。
这是我在电脑上运行的东西,还是直接装在 PS5 本机上的?完成一次性安装后,它完全驻留在 PS5 上:安装器会把一个「WebKit Autoloader」应用缓存到你的主屏幕,每次启动时重新执行漏洞利用和 payload 链,之后无需再用电脑。
怎么安装这个 autoloader?如果你已经越狱,从 Releases 页面下载安装器 ELF,通过 elfldr 或 Payload Manager 发送过去即可,它会为你创建主屏幕应用。如果你尚未越狱,先在电脑上运行 webkit-autoloader-host.py(或 .exe),把 PS5 的 DNS 指向那台电脑的 IP,然后在设置中打开用户指南来运行安装器。
使用它之前需要什么固件或额外工具?你的 PS5 需要处于 1.00–5.50 或 7.00–13.60 固件版本;如果你尚未越狱,还需要同一网络中的一台电脑来运行宿主脚本完成初始设置。
主要的限制或麻烦是什么?它只支持 1.00–5.50 和 7.00–13.60 固件,而且如果你尚未越狱,第一次运行漏洞利用时必须把主机的 DNS 临时重定向到网络中的一台电脑。
它需要联网回传或保持连接才能工作吗?不需要——一次性安装完成后,漏洞利用页面和 autoloader 内容会直接缓存在 PS5 上,之后的启动不再涉及电脑、网络或第三方 DNS 服务器。
Payload Manager 是什么?它是一个功能完整的 Web UI,在找不到 autoload.txt 配置时自动启动,让你直接在浏览器中浏览和发送 ELF payload,无需手动编辑配置文件。
autoload.txt 配置是怎么工作的?在 U 盘的 ps5autoloader 文件夹或主机内部的 /data/ps5autoloader 中,每行列出一个 .elf/.bin 文件名(区分大小写),还可以在条目之间插入诸如 !1000 的等待命令,让下一个 payload 延迟相应的毫秒数。
为什么要避开常见的 DNS 托管式 WebKit 漏洞利用?常见的 autoloader 会把你 PS5 的 DNS 指向陌生人的服务器,一旦那台服务器消失或变更,你的整套方案就失效了;而这个工具会在一次性安装后把所有内容缓存在你自己的主机上。
是否阻止了我网络上其他设备加载 payload?在 7.00–13.60 固件上,autoloader 使用自定义的 elfldr,只接受来自 PS5 本机(localhost)的连接,防止网络上其他设备向你的主机推送 payload。
Creator
itsPLK
Size
1.9 MB
Stars
1.1K
Age
2mo
Commits · 90 Days