Archive of https://github.com/itsPLK/ps5-bdjb-umtx-autoloader — An automated payload loader for exploited PS5 consoles https://github.com/itsPLK/ps5-bdjb-umtx-autoloader
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
2026-05-04 18:47:22 +02:00
.github docs: update README, CHANGELOG and licensing 2026-05-01 22:06:56 +02:00
.idea - Added mockito for unit tests 2025-03-09 16:17:48 -04:00
assembly update pldmgr.elf to v0.1.1 2026-05-02 17:29:04 +02:00
bdj-tools "Fix" IntelliJ project. Also forgot to delete a couple of moved files in previous commit. 2024-10-05 11:33:57 -04:00
lib Switch from downloading Personal Basis Profile 1.0 to custom built Personal Basis Profile 1.1 JARs. 2024-10-24 22:03:05 -04:00
sdk feat: add kill syscall to LibKernel and terminate Disc Player process after payload autoloading 2026-04-21 23:07:00 +02:00
stubs Improvements and bug fixes 2025-02-25 02:16:25 -05:00
xlet ui improvements 2026-04-30 14:41:28 +02:00
xploit restrict ELF loader to localhost 2026-04-30 15:04:10 +02:00
.gitignore Switch from downloading Personal Basis Profile 1.0 to custom built Personal Basis Profile 1.1 JARs. 2024-10-24 22:03:05 -04:00
bdjb_screenshot.png docs: update README, CHANGELOG and licensing 2026-05-01 22:06:56 +02:00
build_iso.sh update build script 2026-04-30 16:23:02 +02:00
CHANGELOG.md docs: update README, CHANGELOG and licensing 2026-05-01 22:06:56 +02:00
DEVELOPMENT.md docs: update README, CHANGELOG and licensing 2026-05-01 22:06:56 +02:00
docker-compose.yml update build script 2026-04-30 16:23:02 +02:00
Dockerfile feat(autoloader): add resilient sequential autoload chain 2026-04-21 22:31:52 +02:00
DONATE.md docs: update README, CHANGELOG and licensing 2026-05-01 22:06:56 +02:00
LICENSE docs: update README, CHANGELOG and licensing 2026-05-01 22:06:56 +02:00
pom.xml feat: rename project to BD-JB Autoloader, reset version, and increase elfldr initialization timeout 2026-04-22 12:52:28 +02:00
ps5loader.png docs: update README, CHANGELOG and licensing 2026-05-01 22:06:56 +02:00
README.md Update README 2026-05-04 18:47:22 +02:00

This repository is archived.
Future development moved to a new project:

itsPLK/ps5-bdjb-autoloader



PS5 BD-JB Autoloader v0.1.0

Fork of hammer-83's ps5-jar-loader

 

Automatically loads your .elf, .bin and .jar payloads.
Supports PS5 firmwares up to 7.61.

Other Autoloaders:
PS5 Y2JB Autoloader | PS5 Lua Autoloader

How to Use

  • Create a directory named ps5_autoloader.
  • Inside this directory, place your .elf, .bin, and .jar files, and an autoload.txt file.
    • In autoload.txt, list the files you want to load, one filename per line.
    • Filenames are case-sensitive — ensure each name exactly matches the file.
    • You can add lines like !1000 to make the loader wait 1000 ms before sending the next payload.
    • You can add lines like @ message to show a notification on the PS5.
    • Do NOT include elfldr.elf in autoload.txt unless you want to override the bundled version; it is loaded automatically when needed for ELF/BIN payloads.
  • Put the ps5_autoloader directory in one of these locations (priority order - highest first):
    • Root of a USB drive
    • Internal drive: /data/ps5_autoloader
    • Root of the disc itself.

Setup Instructions

This autoloader is deployed via a BD-R disc.

  1. Download the PS5 BD-JB Autoloader ISO from the Releases page.
  2. Burn the ISO to a BD-R(E) disc using software like ImgBurn (use UDF 2.50 filesystem).
  3. Insert the disc into the PS5 and launch it from the "Media" tab.

Note: Since this is a disc-based loader, updates to the loader itself require burning a new ISO. However, your payloads on USB or internal storage can be updated at any time.

Additional Info

How to use custom ELF Loader version?

By default, the autoloader uses a bundled version of elfldr that only accepts connections from the PS5 itself (localhost). This improves security by preventing other devices on your network from sending payloads to your console.

If you want to use a "normal" ELF Loader that allows sending payloads from any device:

  1. Place your elfldr.elf in the ps5_autoloader directory.
  2. Add elfldr.elf as the first entry in your autoload.txt.
Payload Manager integration

The autoloader includes Payload Manager. Using it is the most reliable way to load etaHEN/kstuff, as it closes the Disc app before sending the payloads. To use it, make pldmgr.elf the only item in your autoload.txt.

Credits

There are so many who decided to share the knowledge with the community to make this project possible.

  • Andy "theflow" Nguyen for discovering and sharing BD-J vulnerabilities and native execution techniques without which none of the work in this repo would be possible.
  • Specter for his Webkit implementations of PS5 kernel access which served as a base for Java implementation: IPV6, UMTX and Byepervisor.
  • Flat_z for pretty much everything of significance that happened in PlayStation scene since as far back as PS3, including the UMTX exploitation strategy and AGC-based kernel r/w contained in this repo.
  • Cheburek3000 for contributing an alternative implementation of UMTX exploitation.
  • bigboss and John Törnblom for their work specifically in BD-J area.
  • iakdev for the contribution of the menu loader.
  • CryoNumb for ideas, code contributions and helping with testing on various firmware versions.
  • All the other contributors to Specter's Webkit implementations: ChendoChap, Znullptr, sleirsgoevy, zecoxao, SocracticBliss, SlidyBat, idlesauce, fail0verflow kiwidog, EchoStretch, LM.
  • Testers of various firmware revisions: jamdoogen, Twan322, MSZ_MGS, KingMaxLeo, RdSklld, Ishaan, Kirua, PLK, benja44_, MisaAmane, Unai G, Leo.

Development

For technical details and building from source, see DEVELOPMENT.md.

Disclaimer

This tool is provided as-is for research and development purposes only. Use at your own risk. The developers are not responsible for any damage, data loss, or consequences resulting from the use of this software.

License

This project is licensed under the GPL-3.0 License.

The original project by hammer-83 did not include an explicit LICENSE file.
All unique modifications and additions in this fork are licensed under GPL-3.0.

Donate