A new Blu-ray exploit for the PS5 has opened up powerful tools for homebrew developers and security researchers.
Developer gezine_dev took to Twitter/X to share they they’ve released a new Blu-ray Disc Java (BD-J) sandbox escape, introducing a powerful set of tools aimed at PS5 homebrew developers and security researchers. The release (Github page here) supports PS5 firmware versions up to 13.42 and includes several quality-of-life features designed to simplify BD-J application development and exploit research.
The exploit is a BD-J sandbox escape, a technique that allows code running inside the PS5’s Blu-ray Disc Java environment to break free of Sony’s normal software restrictions. Among its prominent features is RemoteJarLoader, which allows users to send Java archive (JAR) files directly from a PC to the PS5 over a local network. Normally, testing BD-J applications required repeatedly burning or preparing Blu-ray discs after every code change. With RemoteJarLoader, users can simply compile their application, send the updated JAR across the network, and execute it immediately.
On-Screen Logging displays diagnostic messages while Network Logging sends those same messages to a connected computer through a logging server listening on TCP port 18194. Users can take advantage of the included “log_client.py” utility to receive detailed runtime output. Similarly, the included RemoteJarLoader server listens on TCP port 9025, allowing users to upload executable JAR files using the supplied “jar_client.py” script or any compatible TCP client. As with standard Java applications, users must specify a valid “Main-Class” entry in the JAR manifest before execution.
For PS5s running firmware 13.42 and earlier, no additional steps are required. However, for firmware 13.60 and higher, the BD-J environment must first be restored using the utility “bdj_unpatch.elf”. This restoration process requires an already jailbroken PS5, as the utility is loaded through an ELF loader to reverse Sony’s modifications to the BD-J subsystem. Before making any changes, it automatically backs up the existing “bdjstack.jar” file as “bdjstack.jar.bak”.
The developer also warned users not to reinstall the system firmware after applying the BD-J restoration. Doing so would overwrite the modified BD-J files, removing the restoration and requiring the process to be repeated.
