PS5 Game Debug Menus with 60FPS / 120hz PS5 Game Patches via Illusion0001

In PS5Scene news this weekend, following the PS5 Hypervisor Exploitation Confirmation by Flat_z, PS5 PKG (Package) Testing and recent Libhijacker PS5 Updates by Astrelsky developer @illusion0001 of Illusion0001.com announced on Twitter his Libhijacker Github Fork containing some PS5 Game Developer Debug Menus with 60FPS PS5 Game Patches for Exploited PS5 Consoles via the PlayStation 5 Kernel Exploit alongside 120hz Patches for PS4 games on exploited PS5 systems proceeding the Tormented Souls PS5 Developer Debug Menu Unlock Key Combination and PS5 Debug Settings Hidden Menu Discovery.

Download: libhijacker_1.158-986e40f1.zip (357 KB) / GIT Fork

Spoiler: Depreciated

Here's further setup details including the supported PS5 titles from the included README.md: libhijacker

Project name is temporary

This repo will likely be short lived. I got tired of waiting and wanted to upload it somewhere. Proper credits will be attributed later.

Fork with support for game patching. check out the original project by astrelsky (more for developers).

Quick Setup

Download the latest zip from the release page.
Extract the zip with all files to a folder on your computer.
Load your preferred method of exploiting your PS5. (BDJB or webkit).
Install python 3 and aiofiles for required dependency.
pip install aiofiles
On ELF loader stage, run send_elf.py with your PS5 IP as first argument. Example: python ./send_elf.py 10.0.6.9
- To kill the daemon process for easier development, you can use kill_daemon.py to kill the process and re run send_elf.py to send the new build of the daemon executable. (this can be done outside the web browser or bdj window)
- You can also find useful commands within launch.py and it's arguments.

Supported Titles

Batman: Arkham Knight v1.15: 60 FPS
Bloodborne v1.09: 60 FPS by Lance McDonald
- Also includes:
  - No Motion Blur
  - No Chromatic Aberration
  - Debug Camera by Lance McDonald
Crash Team Racing v1.21: 60 FPS
Demon Souls v1.00: 60 FPS Unlock in Cinematic Mode
Driveclub v1.28: 60 FPS
Gravity Rush 2 v1.11: 60 FPS
The Order 1886 v1.02: 60 FPS
The Last Guardian v1.03: 4K at 60FPS
The Last of Us Remastered 60 FPS + Debug Menu (v1.11)
The Last of Us Part 2 60 FPS + Debug Menu (v1.00 + v1.09)
Just Cause 4 v1.32: 60 FPS
Shadow of the Colossus: 1440p at 60FPS + Debug Menu
Silent Hills: P.T at 60FPS
Red Dead Redemption 2 v1.29: 60FPS

Known Issues (specific to this fork)

Daemon sometimes crashes when scrolling through the game list.
Daemon may crash with nullptr dereference in game patch thread.
Daemon may reapply patch while game is running.

Building

Install LLVM 16.
Build and install PS5SDK (firmware does not matter).
Clone this repo with recursive submodules.
Generate library stubs using stubber which can be found in /stubber folder.
- Build main.go: go build
- Dump /system/lib/common/ folder from your console (4.03) in decrypted prx files using the ps5-self-dumper payload from sleirsgoevy.
- Or use my pre generated.
- Run the stubber. ./main aerolib.csv (PS5 System Folder) (Output Folder)
- Copy .so files to this repository folder into lib. (Create one if it does not exist)
Build the hijacker

Code:

# this assume you have llvm 16
cmake -G Ninja -DCMAKE_C_COMPILER=clang-16 -DCMAKE_CXX_COMPILER=clang++-16 -DCMAKE_TOOLCHAIN_FILE=$PS5SDK/cmake/toolchain-ps5.cmake -DCMAKE_EXPORT_COMPILE_COMMANDS=1 .
ninja

6. Load it on your console using send_elf.py. you will see kernel log output on the first instance where you originally send the spawner payload.