This repository packages Relapse-Exploit so it can run as a CasaOS app on a home server. The PS5 browser loads the page from the local network over plain HTTP, instead of depending on a public host.
The upstream project is a static site (index.html, src/, offsets/, payloads/) plus serve.py. That script listens on port 8000 and sends Cache-Control: no-store, but it calls Windows ipconfig and exits on Linux. This repo does not change the exploit files. It serves the same tree with nginx inside a container, with the same no-store header.
Supported firmware, as stated by the upstream project: 7.00 through 13.60.
Open this address in the console browser, over plain HTTP:
http://<LAN-IP>:8000/
Do not use the CasaOS HTTPS proxy. Port 9021 is the loader on the console after the page runs. This container does not publish that port.
If the browser stalls, reload the page. If the console hangs, reboot it before trying again.
CasaOS Custom Install receives only docker-compose.yml, not the build context. The image has to exist on the host first.
- Clone this repository on the CasaOS machine.
- In the repository directory, build the image:
docker compose buildThis creates relapse-exploit:local.
- In CasaOS: App Store → Custom Install → upload
docker-compose.yml. - On the PS5, open
http://<LAN-IP>:8000/.
The published port defaults to 8000. Set WEBUI_PORT before install to use another one.
From the CasaOS host, docker compose up -d --build builds and starts the container in one step.
Default payload files are stored in the image. On first start, if /DATA/AppData/relapse-exploit/payloads is empty, the container copies them there. You can replace or add ELF files in that folder from the CasaOS file manager without rebuilding the image. A folder that already has files is left as it is.
Exploit and site content come from ntfargo/Relapse-Exploit, copyright Nathan Fargo, MIT License. The license file in this repository is the upstream license.
- Sonic_Iso: kernel exploit
- Jordy: WebKit exploit and kernel bug
- ntfargo: exploit development
- ufm42: exploit development
- Dr. Yenyen: testing
Other help: TheFlow, SlidyBat, Flatz, cow, nhk, bollarz, Sleirsgoevy, EchoStretch, EarthOnion.
The CasaOS packaging in this repository (Dockerfile, nginx config, Compose file, entrypoint, and this README) was produced by an AI assistant. The exploit sources were copied from the upstream project and were not rewritten.
Use this only on devices you own or are authorized to test. The software is provided as-is, without warranty. Risks include instability, data loss, and account bans.