BD-JB5

PS5 Blu-ray Disc Java Sandbox Escape.
Supporting RemoteJarLoader, On-Screen Logging and Network Logging.

Supported upto 13.42 firmware.

---

Firmware Support (PS5)

PS5 Firmware	BD-JB5 Status
≤ 13.42	✅ Full support — the BD-J sandbox escape runs on clean firmware straight from the BD-RE disc
13.60 → current	⚠️ BD-J is patched from 13.60 — works only on an already-jailbroken console: push bdj_unpatch.elf through elfldr to unpatch BD-J (backs up bdjstack.jar → .bak)
After a firmware reinstall/update	❌ Re-flashing firmware wipes the unpatch — BD-JB access is lost until the unpatch is redone

What This Fork Adds

• payloads/fwdump/ — read-only firmware & filesystem recon payload (fwdump.jar): dumps system properties, firmware hint files, key directory listings and filesystem roots to the RemoteLogger (18194) + on-screen. Build with make -C payloads/fwdump (expects bdj-sdk cloned as a sibling directory).
• tools/jar_client.py — hardened RemoteJarLoader client: connect timeout, retry with backoff, transfer progress, clean FIN, and optional --log that live-tails the RemoteLogger on port 18194 while you send.

python3 tools/jar_client.py -H <PS5_IP> payloads/fwdump/fwdump.jar --log

All original work by Gezine — see upstream README and credits below.

RemoteLogger server is listening on port 18194.
Use log_client.py to get the log.
I recommend running log_client.py first, then starting the BD-J app.

RemoteJarLoader server is listening on port 9025.
Use jar_client.py to send the jar file.
You can use any other TCP payload sender too.
Don't forget to set Main-Class in manifest.txt.

To use at 13.60 and higher firmware

Note : YOU NEED ALREADY JAILBROKEN PS5

Send bdj_unpatch.elf to elfldr to unpatch BD-J.
bdj_unpatch.elf will backup existing bdjstack.jar to bdjstack.jar.bak just in case.

Now you will be able to use BD-JB.

DO NOT REINSTALL FW, IT WILL WIPE THE PATCH AND LOSE BD-JB

---

Use john-tornblom's bdj-sdk and ps5-payload-sdk for compiling.

Credits

• TheFlow — BD-JB documentation & native code execution sources.
• hammer-83 — PS5 Remote JAR Loader reference.
• john-tornblom — BDJ-SDK and ps5-payload-sdk used for compilation.
• ufm42 - kexp used for PS5 post JB all-in-one shellcode
• kuba-- — zip used for bdj_unpatch elf payload.

---