What is the unjail-ps5app-payload ?
The unjail-ps5app-payload is a persistent PS5 daemon payload.
On launch it self-elevates, caches the kernel root vnode, and opens a TCP listener on 127.0.0.1:9069.
For every accepted connection it reads a request, promotes the caller's process (credentials, capabilities, and filesystem view), and returns the outcome in a reply.
The daemon stays running until the console reboots.
Any homebrew can request to elevate itself (See Payload promotion), there is no whitelist or any other restriction.
This payload is a C# SharpProspero port and adaptation of LightningMods etaHEN's "Jailbreaking an app".
How to use
- Send to elfldr
- Start homebrew application and request promotion (see application's usage/readme)