Breaking Down the "Relapse" PS5 Jailbreak

A new exploit chain, dubbed Relapse-Exploit, has been released by developer ntfargo on GitHub. This tool targets the PlayStation 5, providing a pathway for security research and system modification.

🛠️ Compatibility & Scope

The exploit is designed to function across a specific range of system software. Mathematically, the supported firmware versions $V$ can be described as: $7.00 \le V \le 13.60$

---

🚀 Deployment Guide

To implement the exploit, users should follow these specific steps:

• Network Configuration: Navigate to the PS5 network settings and update the Primary DNS to 45.56.67.85.
• Host the Exploit: You have two options for execution:
  1. Execute the serve.py script on a local machine.
  2. Access the hosted URL: https://ntfargo.github.io/Relapse-Exploit/ directly via the console's browser.

Local Execution Example

If you are running the server locally, you would typically use a command like this:

python3 serve.py

---

🔍 Technical Architecture

The Relapse-Exploit operates through a multi-stage chain to gain system privileges.

1. The Browser Stage: This phase utilizes JSC info leaks combined with a structured clone object pool mismatch to achieve corruption of a typedarray.
2. The Kernel Stage: This phase leverages an address leak and a Use-After-Free (UAF) race within aio_multi_wait to establish full kernel read/write capabilities.

---

⚠️ Stability & Troubleshooting

The process is not always seamless. Users should be aware of the following:

• Webkit Issues: The browser may stall. If this happens, simply refresh the page.
• Kernel Panics: The kernel exploit can cause the system to hang or crash. Do not panic $\rightarrow$ Simply reboot the console and attempt the process again.

---

👥 Credits & Contributions

This project was made possible by the collaborative efforts of:

• Yenyen & TheFlow
• SlidyBat & Flatz
• cow & nhk
• bollarz & Sleirsgoevy
• EchoStretch & EarthOnion

---

⚖️ Legal Disclaimer

Important: This project is strictly for educational purposes and security research. It does not support piracy or any unauthorized access to commercial hardware. Users must only apply this to devices they own. By using this tool, you accept all risks, including:

• System instability
• Permanent data loss
• Account bans from Sony services