Y2JB Autoloader: jailbreak through the YouTube app

Do this before YouTube connects to the internet. Go to:

1. Settings
2. ›Network
3. ›Settings
4. ›Set Up Internet Connection

Choose Set Up Manually, pick Wi-Fi or LAN cable, change DNS Settings to Manual and set Primary DNS to 127.0.0.2Copy. Leave the secondary DNS blank.

A network or PSN connection error after this is expected. This DNS keeps the console and the YouTube app away from PSN, YouTube updates and system update prompts.

The browser method from the tutorial needs the 45.56.67.85 DNS. Switch back to it whenever you need the browser exploit.

The exploit (Relapse) needs an active network connection: Wi-Fi or a cable to your router. Internet access is not required.

• 10.20 to 13.60: the network connection is required.
• 7.00 to 10.01: Relapse is used when a network connection is found; without one, it falls back to Lapse.

1. Create a new offline account on the PS5.
2. With the console jailbroken and etaHEN loaded, log in to that new account and open the etaHEN toolbox.
3. Open the Remote Play menu. The account is fake-activated automatically.

Use this account, not your PSN account, every time you open YouTube for the jailbreak.

Install the YouTube version that matches your firmware (list above). Never let it update: the DNS from Step 1 blocks updates.

Jailbreak the console with the browser method and start FTP. Then send download0.dat to the folder of your YouTube app. Create the folder if it does not exist:

/user/download/PPSA01650/

If your YouTube app has another title ID, use its folder instead (PPSA01651 or PPSA01652).

Option A — Payload Manager (default). If there is no autoload.txt, the autoloader starts Payload Manager, which has a web page you open in your computer or phone browser to send payloads and set what loads at startup. No files to prepare.

Option B — your own list (autoload.txt). Create a folder named ps5_autoloader and put your .elf / .bin payloads in it, plus a file named autoload.txt with one file name per line:

• Names are case-sensitive and must match the files exactly.
• A line like !1000 waits 1000 ms before the next payload.
• Put the folder at the root of a USB drive (checked first) or at /data/ps5_autoloader on the console.

When autoload.txt exists, Payload Manager does not start. To keep it, add pldmgr.elf to the folder and to the list.

Log in to the fake-activated account and open the YouTube app. The autoloader runs the kernel exploit and then loads your payloads (or Payload Manager).