GoldHEN Jailbreak for PS4 & PS5

SYSTEM

GoldHEN…
JAILBREAK…
PORTS
DEVICE…
FIRMWARE…
STATUS…
DISPLAY…
COLOR…
LANGUAGE…
TIMEZONE…
NETWORK…
PLATFORM…
ENGINE…
CORES…
COOKIES…

Reading system…

GoldHEN by: SiSTRo

GUI by: SaveEditors

PS5 CHAINS

Pick the chain that matches your firmware. These bring their own payload, so the icon picker on the PS4 tab does not apply here.

POOPSPLOIT 7.00 – 12.00

netcontrol IPv6 rthdr UAF. Jailbreaks in seconds and tears down cleanly — use this on 12.00 and below.

poopsploit retail / testkit poopsploit-dev devkit

P2JB 12.00 – 12.70

A kqueueex cr_ref leak feeding a triple-free race. Only needed above 12.00. Budget roughly an hour: the reference count has to wrap before the race can start and the page looks idle for most of it on purpose. Leave the console on until the payload menu appears.

p2jb retail / testkit p2jb-dev devkit

UMTX

Mirror of zecoxao’s luasauce, kept here so the link does not depend on someone else’s hosting. Upstream is the source of truth.

luasauce retail / testkit luasaucedev devkit

BROWSE

Type any address and go. On an offline host every mirrored site answers by name, so p2jb is enough.

Which one is for my console? A devkit needs the devkit site — it sets target ID 0x81 and the debugger auth ID. Retail and testkit both take the ordinary site (target ID 0x82). Picking the wrong one just fails to jailbreak; it does not harm the console.

creds & greetz

zecoxao, ChendoChap, abc/psfree, idlesauce, flat_z, TheFlow, c0w-ar, earthonion, SIStro, egycnq, abkarino, gezine, Dr.Yenyen, StonedModder, VoidWhisper, EchoStretch, BestPig, AlAzif, drakmor, hzhreal, hammer-83, ntfargo, shahrilnet, Znullptr, LM, ItsJokerZz, cblock, BeLegal, Lord Caio Barros

based on the slopkit by j0rdy

ICONS

Pick the thumbnail icon and the XMB logo separately — they do not have to match. Both are baked into the payload when you press Load Jailbreak in the bar at the bottom of the screen.

Thumbnail settings icon

Not chosen

XMB logo home screen

Not chosen