If you enjoy my work - please consider donating to my BTC address:

bc1qa9zfgnccajsw8vg7k287qz5a7apf8pefj5jjx5

Use third-party USB controllers on PS5. Reads USB HID input from a plugged-in controller and injects it into a virtual DualSense via the PS5's scePadVirtualDeviceInsertData path (Ghostpad VDI path).

Tested controller: 8BitDo Ultimate 2 in Nintendo Switch Pro Controller mode (VID=0x057e PID=0x2009)

• 60Hz input streaming from USB HID controller → virtual DualSense
• PS5 notifications: startup, controller connect/disconnect, detected controller type
• User assignment: virtual DualSense is bound to the foreground user on startup
• Full button mapping: face buttons, triggers, sticks, dpad, L3/R3, PS button
• Auto-reconnect on controller unplug/replug

• PS5 with kernel exploit (tested on jailbroken PS5)
• ps5-payload-sdk
• USB controller — see supported list below

See othercontrollersGuide.md for adding new controllers.

export PS5_PAYLOAD_SDK=/path/to/ps5-payload-sdk
make clean all

Output: ghost-control-ps5.elf

# Deploy to PS5 (replace IP)
nc -w 5 192.168.1.xxx 9021 < ghost-control-ps5.elf

Or set PS5_HOST in your environment:

make deploy PS5_HOST=192.168.1.xxx

1. VDA: Creates a virtual DualSense via scePadVirtualDeviceAddDevice(type=3)
2. klog capture: Monitors klogsrv TCP to detect the DEVICE_ADDED event and get the device handle
3. force_bind: Binds the virtual device to the foreground user via ShellUI MBus IPC
4. USB HID thread: Detaches usb_hid0 from the controller, opens raw USB FS endpoints, runs the Nintendo Switch Pro Controller USB handshake, then reads 60Hz input reports
5. VDI inject: Parses HID reports into ScePadData and calls scePadVirtualDeviceInsertData at 60Hz

See ProControllerResearch.md for the full research documentation on the USB HID protocol.

GPL-3.0-or-later