00:00Hey how's it going guys welcome back to another PS5 jailbreak video. So we now have the initial
00:05release of the YouTube jailbreak Y2JB by Geji Ne. So this is a pretty big deal here it is a userland
00:11code execution using the PS5 YouTube application and the implications of this is that we will
00:17eventually be able to use this to load the kernel exploit the lapse kernel exploit to jailbreak
00:23up to firmwares like 9.60 and eventually 10.01 once it gets kstuff support which will allow us
00:29to jailbreak digital edition consoles and consoles that don't have a working disk drive. So a pretty
00:34big deal here. Now this is the initial beta release so it's not ready for prime time just yet but we do
00:41have the repo created for it here on github. So we can see here we've got Y2JB userland code execution
00:48using the PS5 YouTube application but the status is that it's a beta right now and not ready for
00:54end users to use due to instability. So it's still quite unstable at the moment and that is why
00:59there's not a backup file that has been added to this repo and that you'd be able to use to restore
01:05it onto a retail console to actually use this as an entry point yet because it's not really ready yet
01:11it's still more or less for testing purposes which is why instead you just have the splash screen file
01:17that you can add if you have an existing jailbreak on the PS5 just so that you can get it set up and
01:22tested initially. So there are backup files already available I'll leave one in the video
01:27description if you really do want to be able to just install the backup file it is the easiest way
01:32to get this exploit set up and running but obviously when you restore a backup file it does reset the
01:37console so I personally wouldn't recommend doing this until we actually get a stable release but if you
01:42want to do that for your retail console then all you have to do is simply get a USB drive that's
01:47formatted in XVAT format extract the PS5 folder from the backup file into the root of that USB drive
01:54plug that USB drive into your PS5 head over to the settings menu and go to the system settings and then
01:59the backup and restore options and select the option to restore a backup and then select the USB drive and
02:06the backup that's on there and tell it to restore but make sure you have a backup of your own console
02:11before you do that because it will erase your save files and all of your other stuff that's on the
02:15console already and once the backup file has been restored you should have the YouTube application
02:20available and when you run it it should run the user land exploit so that is the basic setup for the
02:26end user method but this initial release is mainly designed for people who already have a jailbroken PS5
02:33to be able to set this up and test it without having to restore a backup and I'll show you guys how you
02:38can do that if you have a previous jailbreak so the requirements here are the YouTube application it
02:43specifically needs to be version 1.03 of the YouTube application and you also need FTP access so you
02:50can access the download path to install the cache file as well so that is what is required here
02:56so if we go ahead and go to the code and download this as a zip file as for the package file itself for
03:04the YouTube application I'll leave a link to one in the video description that you should be able to just
03:09install although it is the US configured version of the YouTube application if you want to get the
03:15version that specifically targets your region of console like if you're not able to use the one that
03:21I put in the description because you're in a different region I believe it should work anyway but just in
03:26case you can instead download the YouTube application and then the SC file for your region so to do that
03:34there's this page that's been set up here where you can go to the download base package and select
03:38this version to download the YouTube application you download that and then you select what region
03:44you're in Europe USA or Japan so I would select Europe here and then we just go ahead and proceed
03:50and it downloads that and you download the YouTube application and then you can merge them into one
03:55file by using this package joiner option from there you can take the two applications you downloaded
04:01the SC package and the YouTube application select an output folder and then it will go ahead and merge
04:07those packages to give you a version of the YouTube application that actually matches your region so if
04:13you're having any trouble getting the YouTube application working you can quickly do that to get
04:18that configured then all we need to do is grab a USB drive that's formatted in XFAT or FAT32 format
04:24and go into that USB drive and then copy the package file for the YouTube application into the root of
04:30that USB drive and then unplug that USB and plug it in to your PS5. So once you're on the PS5 you need to load
04:37the existing jailbreak. So in this case I'm on a 4.03 system so I can use the web browser to jailbreak
04:43so I'm just going to use that and that is just to enable the debug settings. I'm not going to run KSTUFF
04:48or ETAHEN here we're just going to get the jailbreak loaded which will enable the debug settings and then
04:54also run the FTP server which will start running on port 2121. Then we're going to go into our settings
05:02we're going to scroll down to our debug settings, game, click OK to that message and package installer
05:07and install the package file for the YouTube app and that will get that version installed onto our PS5.
05:14So once that's done we should see the YouTube application is now here if I press the options
05:18button and go to information we can see the version number is showing as 1.003 which is what we want
05:25so that is the correct version. So from here if I go into the settings system system software console
05:31information you want to note down your IPv4 address make sure you are connected to your local network.
05:37We also don't want the YouTube application forcing itself to update to a newer version so we need to
05:42make sure we have a DNS blocker applied. You can find that in the network settings under settings and
05:47set up an internet connection. Under your registered network if you press the options button and go to
05:52advanced settings scroll down to the DNS settings and make sure you have a manual DNS set not automatic
05:59and that the primary DNS is set to 62.210.38.117 and that is your nomadic DNS blocker to prevent
06:07updates for your applications as well as system updates so just make sure you have that applied
06:13so that the YouTube application when you launch it cannot try to update. So from here what I'm going to
06:18do is switch back over once again to my computer and on the computer we're going to open up FileZilla
06:24or WinSCP. You want an FTP client that you can use here. So from here in the host box we're going to
06:30enter the IP address of our PS5 that we noted down. Port number is 2121 in this case unless you're using
06:37ETA Hen to use FTP in which case it's 1337 and then we can quick connect. We need to actually be
06:45running the YouTube application here so if I go ahead and run the YouTube app on the PS5
06:50wait for that to load up. Okay and at this point if I go back to the computer from here we're then
06:56going to navigate into the mount directory MNT and then the sandbox folder. Then at the bottom we have
07:02this PPSA 01650 folder and that is our YouTube application. If we go in there we have this download
07:09zero folder and if we right click on this we need to give this the appropriate permissions
07:14because by default it doesn't have the correct permission set so that we can replace files in
07:19this folder. So we're going to right click and go to file permissions. Now it says everything is set
07:24there read write and execute 777 but we want to recurse into subdirectories and apply to all files
07:30and directories and click ok and that will go ahead and do that. So now we can enter that folder go to
07:36the cache folder and the splash screen folder and then this long string here and this is the file that
07:42we're replacing splash.html. So all we need to do is replace that file with the one from the exploit so
07:48if we open up the exploit folder y2 jailbreak main go into the download zero folder cache splash screen
07:54and this folder here and this is our replacement file that we're going to copy in here and we want
07:59to of course overwrite the existing file and that is it successful. So that's us now installed the
08:07exploit manually. So back on the PS5 we can just close out of the YouTube application now
08:12and then make sure you disconnect from the internet which is an important step because that cache file
08:18can get overwritten if we remain connected to the internet. So we're going to go onto our network
08:23settings and then go to the settings section here and uncheck the box to connect to the internet
08:28and that is us all good there. So I'm going to run the YouTube application and see what happens here
08:34on our PS5. So we get the you are signed out of PlayStation and there is remote JS loader listening
08:44on 51937. So it looks like that actually worked. We can see that it has actually loaded. You can
08:51actually see the exploit text behind the YouTube sign in page here. So we can click OK to that message
08:57and you can see if we zoom in we do in fact have the exploit running there starting the exploit there
09:03bytecode hijacking then setting up the ROP and then further down we have remote JS loader is listening
09:10on port 51937 and it is waiting for a connection. Now I've not really seen any payloads come out yet
09:17that are designed to load using this. So for the moment there doesn't appear to be any payloads I can
09:24send right now. There probably will be some test payloads like some notification hello world type stuff
09:30fairly soon but that's how you get this set up and running. So yeah just want to make a quick video
09:35there going over this new release from Geji Ne the king of user land exploits. So hope you guys enjoyed
09:41this video or found the information useful. If you did please leave a like and subscribe and once again
09:45as always I'll hopefully see you guys in the next one.
