Fork of BD-UN-JB
Automatically loads the kernel exploit and your elf payloads.
Supports PS5 firmwares 4.03-12.00.
Note: To work on firmwares above 7.61, the PS5 must already be jailbroken (requires the bdj_unpatch payload).
There are two ways to use the autoloader:
If no autoload.txt config is found, the autoloader will automatically launch Payload Manager — a fully-featured PS5 payload manager with a web UI. This lets you configure and send payloads directly from your browser, without needing to manually set up config files or transfer ELF files ahead of time.
Just run the autoloader — if there's nothing configured, Payload Manager starts automatically.
Note: Payload Manager also has its own built-in autoload feature, which lets you configure payloads to load automatically on startup — all managed through its web UI. This is separate from the
autoload.txtmechanism described below.
For a fixed, automated payload chain, you can configure payloads manually:
- Create a directory named
ps5_autoloader. - Inside this directory, place your
.elf/.binfiles, and anautoload.txtfile.- In
autoload.txt, list the files you want to load, one filename per line. - Filenames are case-sensitive — ensure each name exactly matches the file.
- You can add lines like
!1000to make the loader wait 1000 ms before sending the next payload.
- In
- Put the
ps5_autoloaderdirectory in one of these locations (priority order - highest first):- Root of a USB drive
- Internal drive:
/data/ps5_autoloader
Note: When an
autoload.txtconfig is found, Payload Manager is not launched automatically. If you also want Payload Manager available, placepldmgr.elfin yourps5_autoloaderdirectory and add it toautoload.txt.
This autoloader is deployed via a BD-R disc.
- Download the PS5 BD-JB Autoloader ISO from the Releases page.
- Burn the ISO to a BD-R(E) disc using software like
ImgBurn(use UDF 2.50 filesystem). - Insert the disc into the PS5 and launch it from the "Media" tab.
Note: Since this is a disc-based loader, updates to the loader itself require burning a new ISO. However, your payloads on USB or internal storage can be updated at any time.
How to use custom ELF Loader version?
By default, the autoloader uses a custom version of elfldr that only accepts connections from the PS5 itself (localhost). This improves security by preventing other devices on your network from sending payloads to your console.
If you want to use a "normal" ELF Loader that allows sending payloads from any device:
- Place your custom ELF Loader (e.g.
elfldr.elf) in theps5_autoloaderdirectory. - Add
elfldr.elfto yourautoload.txt. - Note: If you are loading other payloads right after
elfldr.elfin yourautoload.txt, add a sleep command immediately after it (like!4000to sleep for 4 seconds) to give the new ELF Loader time to start up and listen before subsequent payloads are sent.
Example autoload.txt:
# Load custom ELF Loader
elfldr.elf
# Give it 4 seconds to start up (only needed if sending more payloads)
!4000
# Send other payloads
ftpsrv.elf
- Gezine - BD-UN-JB, Poops exploit implementation
- TheFlow — BD-JB documentation & native code execution sources.
- hammer-83 — PS5 Remote JAR Loader reference.
- john-tornblom — BDJ-SDK and ps5-payload-sdk used for compilation.
- ufm42 - kexp used for PS5 post JB all-in-one shellcode
- kuba-- — zip used for bdj_unpatch elf payload.
This tool is provided as-is for research and development purposes only. Use at your own risk. The developers are not responsible for any damage, data loss, or consequences resulting from the use of this software.
This project is licensed under the GPL-3.0 License.
The original base code remains under its original MIT License (see LICENSE-MIT). All unique modifications and additions in this project are licensed under GPL-3.0.
