A first update for ps5-ezremote-dpi has been released , the payload developed by developer cy33hc , allows us to manage the remote installation of packages via URL in the background, similar to etaHEN DPI but with a lighter and more independent approach.

Unlike previous solutions, this payload is completely self-contained: it does not require etaHEN or kstuff and integrates directly with the ezRemote Client homebrew application , which starts it automatically if it is not already active.

This new version of the app has been recompiled using the latest SDK, including support for offsets for firmware 8.xx, 9.xx and 10.0x , as well as the absolute address of the bus_data_devices structure , as defined in the FreeBSD source code.

A significant intervention has also been made in the management of critical signals: the automatic stack tracing in case of crash has been removed, in order to avoid conflicts with the gdbsrv debugger .

On the technical side, the SDK update also brought the implementation of C11 threads from FreeBSD 11.4 , which improved compatibility and reliability in multithreaded applications.

Instructions

Run the umtx exploit.
Start the elfloader.
Send the file ezremote-dpi.elfto the elfloader.
Wait for the message “ezRemote DPI listening on port 9040” to appear .

Sending URL for installation from Linux

echo 'https://example.org/game.pkg' | nc PS5_IP 9040

Sending URL for installation from Windows

Create a text file containing the URL, making sure there are no spaces before or after the link, you can use etaHEN’s PowerShell script send_payload.ps1 to send the URL to the console:powershell send_payload.ps1 -Payload "C:\path\to\pkg.txt" -IP "192.168.xxx.xxx" -Port 9040