PS5 Release: Kernel Exploit (Webkit – v1.03) compiled for ESP8266

I was having a hard time finding the latest and greatest version of the PS5 Kernel exploit files (known as v1.03 on SpecterDev‘s github) compiled for the ESP8266. Apologies if a compiled version already exists somewhere and I missed it*, but here goes.

If you don’t care about the reasons and the process, and just want the file, here it is: (tested PS5 3.00, but should work up to 4.51 included)

• PS5 4.xx Kernel exploit (Webkit Version) 1.03 (latest files as of 2023/8/13) – For ESP8266

Update: I have pushed a more advanced version of the server which you can now find here.

What is the ESP8266 – And why it matters for the PS5

The ESP8266 is a tiny electronic module, typically aimed at DIY developers, that ships with basic Wifi functionality.

In theory, it’s not super useful on its own and is better used for DIYers working on electronic projects. But in the case of PS5 (and PS4) hacks, the device is perfect: loaded with the PS5 exploit, it can act as a fake Wifi router for your PS5, that will help you run the Webkit hack (and the kernel exploit). It has the benefit of being isolated from the Internet, so no risk of a mistaken firmware update. On top of that, its power needs are entirely fulfilled by the PS5’s usb port.

In other words, the ESP8266 can act as a perfect self contained loader for your PS5 exploit, with no need for an internet connection. And, perhaps more importantly, you can find it on pretty much any retailer for just a few bucks.

How to run the PS5 Kernel Exploit on an ESP8266

Requirements:

1. Get an ESP8266 if you don’t have one
2. Download and install the drivers
3. Download NodeMCU Flasher
4. Download the ESP8266 Binary for the exploit

Installation:

1. Connect your ESP8266 to your PC – If everything works as expected, you should be able to see it in your Device Manager
2. Run NodeMCU Flasher, and select the binary file to flash. The parameters are generally ok with the default, but make sure you select “yes” for erase flash (this will delete everything that was on the chip before).
3. Unplug and re-plug your ESP8266 to restart it
4. You should now see a PS5_WEB_AP wifi router from your PS5. Connect to it (default password is “password“)
5. From there, going into Settings >  User’s Guide, Safety and Health Information > User’s guide will launch the exploit page

If you prefer, Modded Warfare has a great video guide on how to do exactly this, although please note that his links are outdated (well, the binary in particular)

Note: The Server runs at IP 10.1.1.1, most likely your PS5 will get IP 10.1.1.100. You can also connect your PC to the Wifi SSID, this way you should be able to connect to the PS5 via FTP etc…

Additional setup – Internet Access (optional):

my version of the ESP8266 Exploit Host now includes a Fake DNS Server and acts as a Wifi Repeater: in other words, same as before, but it also lets you access the internet, while blocking some specific Playstation urls at the DNS level.

To set this up:

1. head over to 10.1.1.1/admin.html from your PC Browser (after having connected it to the PS5_WEB_AP Wifi router, of course)
2. Edit the config to connect to your Home Wifi router(Set “Enable wifi” to 1, and enter Wifi SSID and Wifi Password, then click on “Save config”)
3. This will set the ESP8266 into the self contained mode with Fake DNS, Internet Access, etc…
4. Once config is saved, the ESP8266 should restart on its own (if it doesn’t, unplug then replug it)
5. You’re all set. At this point you probably have to connect your PC again to the access point for good measure, since it has changed.
6. Things you should try from your PC Browser to confirm everything’s working as expected (make sure you’re only connected to the ESP8266 Access Point, disconnect your LAN cable if you have one):
   • http://10.1.1.1 should display the exploit page
   • https://10.1.1.1 should give you a certificate warning (proceed anyway of course), then redirect you to http://10.1.1.1 and you should ses the exploit
   • https://playstation.net should also send you to the exploit (after a certificate warning)
   • http://playstation.com should be blocked
   • Other websites (e.g. google.com) should be accessible

Sources

• See https://github.com/frwololo/PS4_PS5-ESP8266-Server for details
• Followed mbcrump’s esp8266 compilation guide.

* Prior versions actually did exist. You can get compiled binaries for ESP32 and ESP8266 by Echo stretch here and here respectively. His binaries have the benefit of including the latest FPKG support, which SpecterDev’s repository doesn’t have yet.