Lightweight web server for ESP8266/ESP32 boards that hosts the PlayStation 5 UMTX2 Jailbreak for firmware versions 1.00–5.50, with minor modifications to enable caching, data compression and access to payloads from the PS5's filesystem.

In v1.xx, the following payloads are preloaded: etaHEN, byepervisor, elfldr, kstuff, kstuff-toggle, ftpsrv and webkit-cache-remover. You can't add/remove additional payloads.

In v2.xx, the following payloads are preloaded: elfldr, display-user-id and remove-cache. You can add/remove additional payloads to/from the PS5's filesystem as described here.

Note: This project works on all ESP8266/ESP32 boards that have at least 4 MB flash. For ESP32-S3 boards with 16 MB flash, consider using Stuey-81's PS5_EZ_Host project.

Quick Setup Guide

WiFi Details

SSID: PS5_WEB_AP
Password: password

Prerequisites

The exploit page cannot be opened from the PS5 User’s Guide page, so you must use ESP Host or any other browser app that can access http://10.1.1.1/index.html.

Reason: Currently, only an HTTP server is running on the ESP8266/ESP32 board. Enabling access to the exploit page from the PS5 User's Guide page requires spinning an additional HTTPS and DNS server, which reduces overall speed and stability, especially while using FTP.

Note: If you want to access the exploit page from the PS5 User’s Guide page, consider using 0x1iii1ii’s PS5-Server fork.

Step-by-Step Installation and Usage

Download the latest version of the precompiled .bin file from the releases page and flash it to your ESP8266/ESP32 using NodeMCU PyFlasher (Windows, MacOS) or esptool (Windows, MacOS, Linux).
Connect your PS5 to the ESP8266/ESP32's WiFi and access the exploit page from ESP Host. Once the page is cached, you can disconnect from the internet and jailbreak your PS5 offline in the future.

Additional steps for v2.xx

FTP into your PS5 and place the payloads at the root of the following folder (you might need to create it first): /user/home/<user-id>/webkit/shell/esp-payloads. For example, the path for etaHEN payload should be /user/home/<user-id>/webkit/shell/esp-payloads/etaHEN.bin. Only .bin and .elf payloads will be displayed.

Note: <user-id> is the ID of the current user you run the exploit from. If unsure, run display-user-id payload, which will display the current user ID in a pop-up notification.

Credits

Inspired by stooged's PS5-Server project and frwololo's PS4_PS5-ESP8266-Server project.

README.md Unescape Escape

ESP8266/ESP32 UMTX2 Jailbreak Host for PlayStation 5 (FW 1.00–5.50)