bdj-umtx-hen

This is a BD-J Xlet that enables the execution of ELF payloads on PS5 consoles running firmwares 3.00-4.51. The Xlet uses a privilege escalation vulnerability discovered by theflow, which was later reproduced for the PS4 by sleirsgoevy. To escape the Java sandbox, the Xlet uses that vulnerability to disable the security manager using a technique discovered by sleirsgoevy.

The Xlet needs to be burned to a blueray disc, and includes a number of useful payloads, e.g., an FTP server and a Telnet server. If your PS5 is connected to the internet, these payloads can be downloaded directly from the web so you don't have to burn a new disc when payloads are updated.

Quick-start

TODO

Building

TODO

Reporting Bugs

If you encounter problems with bdj-umtx-hen, please [file a github issue][issues]. If you plan on sending pull requests which affect more than a few lines of code, please file an issue before you start to work on you changes. This will allow us to discuss the solution properly before you commit time and effort.

License

bdj-umtx-hen is licensed under the GPLv3+.