etahen/etahenPS5 homebrew enabler payload offering post-exploitation features: custom plugin/payload loading, unsigned fself/fpkg support, debug settings, FTP server, and direct package installer.
If you find this project useful and would like to support its continued development, consider buying me a coffee!
The Source code is provided in the Source code folder under GPLv3 with all the necessary files to build it as required under GPLv3 However I will not be providing instructions on how to build it since any dev should know how to use cmake
if you haven't already, you will need to either enable script execution globally via
Set-ExecutionPolicy Bypass
in an admin PowerShell window or run the script with this command after replacing the script path
powershell.exe -ExecutionPolicy Bypass -File C:\Path\To\send_payload.ps1
Script Usage
.\send_payload.ps1 -Payload "C:\path\to\example.elf" -IP "192.168.xxx.xxx" -Port XXXX
OR
.\send_payload.ps1
cmdlet send_payload.ps1 at command pipeline position 1
Supply values for the following parameters:
(Type !? for Help.)
Payload: C:\path\to\example.elf
IP: 192.168.xxx.xxx
Port: XXXX
make your own custom plugins via the etaHEN SDK More info Here
etaHEN's ini settings file can be found at /data/etaHEN/config.ini and can be accessed using the built-in FTP
and is automatically created when you run etaHEN for the first time
| INI Key | Description | Default value |
|---|---|---|
PS5Debug | 0 = disables PS5Debug (Sistr0) auto load, 1 = enable PS5Debug auto load | 0 (disabled) |
FTP | 0 = disables etaHEN built-in FTP, 1 = enables it | 1 (enabled) |
discord_rpc | 0 = disables Discord RPC server, 1 = enables it | 0 (disabled) |
toolbox_auto_start | 0 = disabled, 1 = enabled | 1 (enabled) |
Allow_data_in_sandbox | 0 = disables /data in an apps sandbox, 1 = enables it | 1 (enabled) |
DPI | 0 = disables The Direct PKG Installer service, 1 = enables it | 0 (disabled) |
DPI_v2 | 0 = disables DPI version 2, 1 = enables it | 0 (disabled) |
Klog | 0 = disables kernel logging, 1 = enables it | 0 (disabled) |
ALLOW_FTP_DEV_ACCESS | 0 = disables FTP developer access, 1 = enables it | 0 (disabled) |
StartOption | 0=None, 1=Home menu, 2=Settings, 3=Toolbox, 4=itemzflow | 0 (None) |
Rest_Mode_Delay_Seconds | Delay in seconds before patching shellui coming out rest mode | 0 (no delay) |
Util_rest_kill | 0 = don't kill the util daemon during rest, 1 = Do kill it on rest | 0 (disabled) |
Game_rest_kill | 0 = don't kill the open game during rest, 1 = Do kill it on rest | 0 (disabled) |
disable_toolbox_auto_start_for_rest_mode | 0 = disabled, 1 = enabled | 0 (disabled) |
libhijacker_cheats | 0 = disables libhijacker cheats, 1 = enables it | 0 (disabled) |
launch_itemzflow | 0 = disabled, 1 = enables auto launch of itemzflow | 0 (disabled) |
testkit | 0 = disabled, 1 = enables testkit mode | 0 (disabled) |
Display_tids | 0 = disabled, 1 = enables display of title IDs | 0 (disabled) |
APP_JB_Debug_Msg | 0 = disabled, 1 = enables app jailbreak debug messages | 0 (disabled) |
etaHEN_Game_Options | 0 = disabled, 1 = enables etaHEN game options | 1 (enabled) |
auto_eject_disc | 0 = disabled, 1 = enables automatic disc ejection | 0 (disabled) |
Cheats_shortcut_opt | Multi-select option for cheats shortcut | 0 (CHEATS_SC_OFF) |
Toolbox_shortcut_opt | Multi-select option for toolbox shortcut | 0 (TOOLBOX_SC_OFF) |
Games_shortcut_opt | Multi-select option for games shortcut | 0 (GAMES_SC_OFF) |
Kstuff_shortcut_opt | Multi-select option for kstuff shortcut | 0 (KSTUFF_SC_OFF) |
auto_eject_disc | 0 = disabled, 1 = enabled | 0 (disabled) |
overlay_ram | 0 = disabled, 1 = enabled | 0 (disabled) |
overlay_cpu | 0 = disabled, 1 = enabled | 0 (disabled) |
overlay_gpu | 0 = disabled, 1 = enabled | 0 (disabled) |
overlay_ip | 0 = disabled, 1 = enabled | 1 (enabled) |
overlay_kstuff | 0 = disabled, 1 = enabled | 1 (enabled) |
Overlay_pos | Multi-select option for game overlay | 0 (OVERLAY_POS_TOP_LEFT) |
etaHEN's Direct PKG Installer currently is very simple and is considered a WIP the service flow is as follows