PS5Dev/Byepervisor-Reborn

选用指南

AI 根据 README 整理 · 2026/10/14 19:31:11

目标用户

主要面向开发者，不适合普通用户直接使用。

查看 README 依据

# Byepervisor Reborn **Note: This repo should be considered a base exploit for work to be built on top of. It is not useful to regular users in its current release state, this is intended for developers.** ## Summary

使用方式

通过elfldr加载运行，需依赖elfldr才能从休眠模式恢复后继续执行。

查看 README 依据

## Important Notes - You may need to go to Settings -> System -> Power Saving -> Features Available in Rest Mode - Set Supply Power to USB Ports to "Always" - This payload is designed to run through the [elfldr](https://github.com/ps5-payload-dev/elfldr) - This is somewhat important because the payload expects to continue running on resume from rest mode, and it relies on elfldr for this - Post-resume, this payload should leave the system in a state where the kernel can be dumped and patched - XOM/xotext is disabled, write is enabled

部署要求

需要PS5固件13.60或13.20（13.00未测试），且系统需设置为休眠模式时USB端口供电“始终”。需注意区分Pro和非Pro机型。

查看 README 依据

applied. We can abuse this to run some shellcode that has R/W into the hypervisor's address space including the VM Control Blocks (VMCBs). Very similarly to (one version of) [byepervisor of old](https://github.com/PS5Dev/Byepervisor), this exploits the rest mode path too :) Currently only the following firmwares are fully supported: - 13.60 - 13.20 - 13.00 (untested) However this bug should technically be exploitable as low as 6.xx. With modifications, it could work on 14.00 as well, but this is not provided here, especially since there is no public 14.00 kernel exploit anyways.

## Important Notes - You may need to go to Settings -> System -> Power Saving -> Features Available in Rest Mode - Set Supply Power to USB Ports to "Always" - This payload is designed to run through the [elfldr](https://github.com/ps5-payload-dev/elfldr) - This is somewhat important because the payload expects to continue running on resume from rest mode, and it relies on elfldr for this - Post-resume, this payload should leave the system in a state where the kernel can be dumped and patched - XOM/xotext is disabled, write is enabled

已知限制

仅支持特定固件版本，14.00尚未支持；若系统在从休眠模式恢复时关机，则漏洞利用失败。

查看 README 依据

applied. We can abuse this to run some shellcode that has R/W into the hypervisor's address space including the VM Control Blocks (VMCBs). Very similarly to (one version of) [byepervisor of old](https://github.com/PS5Dev/Byepervisor), this exploits the rest mode path too :) Currently only the following firmwares are fully supported: - 13.60 - 13.20 - 13.00 (untested) However this bug should technically be exploitable as low as 6.xx. With modifications, it could work on 14.00 as well, but this is not provided here, especially since there is no public 14.00 kernel exploit anyways.

- Open an issue if the payload mis-identifies what your system is, and note the hex value printed in brackets in the notification - If the system shuts down when resuming from rest mode, it means the exploit failed - If it failed, likely there's something wrong with the payload and your situation is not supported, this exploit should be 99.9% stable ## Build notes