PS5 Y2JB Autoloader

Automatically loads the kernel exploit and your elf payloads.
Supports PS5 firmwares 4.03-13.60
(Note: FW 11.40 is currently not supported)

Other Autoloaders:
WebKit | BD-JB | Lua

There are two ways to use the autoloader:

If no autoload.txt config is found, the autoloader will automatically launch Payload Manager — a fully-featured PS5 payload manager with a web UI. This lets you configure and send payloads directly from your browser, without needing to manually set up config files or transfer ELF files ahead of time.

Just run the autoloader — if there's nothing configured, Payload Manager starts automatically.

Note: Payload Manager also has its own built-in autoload feature, which lets you configure payloads to load automatically on startup — all managed through its web UI. This is separate from the autoload.txt mechanism described below.

For a fixed, automated payload chain, you can configure payloads manually:

• Create a directory named ps5_autoloader.
• Inside this directory, place your .elf / .bin files, and an autoload.txt file.
  • In autoload.txt, list the files you want to load, one filename per line.
  • Filenames are case-sensitive — ensure each name exactly matches the file.
  • You can add lines like !1000 to make the loader wait 1000 ms before sending the next payload.
• Put the ps5_autoloader directory in one of these locations (priority order - highest first):
  • Root of a USB drive
  • Internal drive: /data/ps5_autoloader

Note: When an autoload.txt config is found, Payload Manager is not launched automatically. If you also want Payload Manager available, place pldmgr.elf in your ps5_autoloader directory and add it to autoload.txt.

You can update the autoloader by simply placing y2jb_update.zip (from the Releases page) on the root of a USB drive, and starting the app.

Installation is the same as the original Y2JB (remote loader).

Install YouTube (PPSA01650 / PPSA01651 / PPSA01652):

Then FTP download0.dat from Releases to /user/download/PPSA0165*/.

You might find a system backup with pre-configured Autoloader (I don't distribute such backups).

You can also restore Y2JB (remote loader) system backup, and then:

• use FTP to place download0.dat from releases page in /user/download/PPSA01650
• or install separate YT app from different region, and use FTP to place download0.dat from releases page in /user/download/PPSA0165*/

# Load custom ELF Loader
elfldr.elf
# Give it 4 seconds to start up (only needed if sending more payloads)
!4000
# Send other payloads
etaHEN.elf

• Gezine - creator of the original Y2JB
• shahrilnet, null_ptr - Referenced many codes from Remote Lua Loader
• BenNoxXD - ClosePlayer reference
• ntfargo - Thanks for providing V8 CVEs and CTF writeups
• abc and psfree team - Lapse implementation
• matem6 - P2JB implementation
• edisnord - Relapse implementation
• flat_z and LM - Helping implement GPU rw using direct ioctl
• john-tornblom and EchoStretch - Providing elfldr.elf payload
• hammer-83 - Various BD-J PS5 exploit references
• zecoxao, idlesauce, and TheFlow - Helping troubleshoot dlsym
• Dr.Yenyen and PS5 R&D community - Testing Y2JB
• Rush - Creating Y2JB backup file
• Feyzee61 - download0.dat generator workflow
• ufm42 - kexp used for PS5 post JB all-in-one shellcode

This project is licensed under the GPL-3.0 License.

The original Y2JB base code remains under its original MIT License (see LICENSE-MIT).
All unique modifications and additions in this fork are licensed under GPL-3.0.

This tool is provided as-is for research and development purposes only. Use at your own risk. The developers are not responsible for any damage, data loss, or consequences resulting from the use of this software.

• donate to PLK (creator of this autoloader)
• donate to Gezine (creator of the original Y2JB)