CheatSpecter 0.4.3 (beta)

Beta. Everything new in 0.4.3 passes the automated tests against the simulated console, but none of it has been tried on a real PS5 yet. Each new feature is marked Beta below. Use at your own risk, and save your game before trying something new. CheatSpecter has only been tested on a Jailbroken 13.60 PS5.

Download

• cheatspecter-v0.4.3.elf: the payload. Send it to the PS5 the way you load any payload, with ps5debug-NG running, then open http://<PS5 IP>:8744.
• cheatspecter-0.4.3.mcpb: the MCP server for Claude Desktop (see the MCP server page).

Loading 0.4.3 replaces an older CheatSpecter payload that is already running.

Everything new in this version passes the automated tests against the
simulated console. None of it has been tried on a real PS5 yet, so every
new feature below is marked Beta (not yet tried on a real PS5).

Cheat files

• Beta (not yet tried on a real PS5). The game's cheat file on the PS5
  opens first. The online collections are no longer waited for, so the
  switches are ready even when GitHub is slow or out of reach.
• Beta (not yet tried on a real PS5). A community table made for exactly
  the running game's title ID and version is converted and saved into the
  game's .cspector file on the PS5, next to your own cheats, and opens from
  there next time with no download. This happens once per game version, not
  again after you delete the file in the same visit, and not while the cheats
  showing came from another version's file (a Save it into button,
  naming the file, is offered instead). Saved tables look and work exactly
  like downloaded ones.
• Beta (not yet tried on a real PS5). Check for updates reads a saved
  table's source again and lists the new, changed and removed cheats before
  replacing it; your own cheats are never touched. A quiet check in the
  background shows Review update when something changed.
• Beta (not yet tried on a real PS5). A bar above Your cheats shows
  the file's name, whether it is saved, saving, not on the PS5 yet, or failed
  (with Try again), how many cheats it holds, and the start set.
• Beta (not yet tried on a real PS5). Save now downloads the game's
  .cspector file to the phone or computer you are using: your own cheats,
  the tables saved for the game and the start set. Saving on the PS5 happens
  by itself as you make changes, so Save to PS5 is gone. Exporting for
  GoldHEN / etaHEN and Re-find my cheats after a game update… moved to
  the … menu of Your cheats.
• Beta (not yet tried on a real PS5). … → Delete from PS5… deletes
  the game's cheat file for this version, after a confirmation that names the
  file and says what is lost (Cancel has the focus). Cheats this page has on
  are switched off first. The payload only deletes .cspector files in its
  own cheats folder.
• Beta (not yet tried on a real PS5). On this PS5: cheat files that
  etaHEN, elf-arsenal or GoldHEN keep on the console
  (/data/etaHEN/cheats, /data/elf-arsenal/cheats, /data/GoldHEN/cheats
  and their json, shn and mc4 folders), named with the game's title ID,
  are listed as a source and read without being changed. One for the exact
  version is saved into the game's file like an online table.
• Beta (not yet tried on a real PS5). The start set: … → Save what's on
  as this game's start set and Clear start set. Each time the game
  starts, the PS5 switches on what it can by itself (patches; a held value is
  set once, not held), and the page switches on the rest (code cheats,
  scripts) when it opens on the game, once per launch, and says what
  happened. Keep on stays a separate setting on each cheat: the start set
  switches cheats on at the start, Keep on holds a cheat on the whole time.
• Beta (not yet tried on a real PS5). Deleting one of your cheats asks
  first, and says what goes with it.
• The file format stays at formatVersion 1. The new fields (sources,
  startSet, and origin and pageOnly on a cheat) are optional, and 0.4.2
  reads files that have them.

Game patches

• Beta (not yet tried on a real PS5). A Game patches card on the
  Cheats tab offers the patches from
  PS4-PS5-Game-Patch
  (frame rate, resolution, quality modes and the like) as switches, each with
  Add to your cheats. Only patches for exactly the running version are
  offered, or ones made to work on any version. Patches CheatSpecter cannot
  apply safely are shown dimmed with the reason, and a patch that is already
  in the game (most likely applied by etaHEN) is shown as on and locked.
• Beta (not yet tried on a real PS5). The patches for your exact version
  are saved into the game's cheat file on the PS5, next to your own cheats,
  and open from there with no download. Check for updates and Review
  update work as for saved cheat tables. Game patches can be part of the
  start set.

Crash protection

• Beta (not yet tried on a real PS5). A cheat switched on (by the page
  or by the PS5) less than a minute before the game closed is marked "May
  have crashed the game" on its row. It is not switched on by itself again
  (by Keep on, or by the start set on the PS5 or in the page) until you
  switch it on by hand, which clears the mark. The page and the TV
  notification say when one was held back.
  Closing the game yourself within a minute of switching a cheat on also
  marks it.

Controller shortcut

• Beta (not yet tried on a real PS5). Off until you switch it on in
  Settings. Holding L2 + R3 (or 2 to 4 buttons you pick) for 0.8 seconds (or
  a time you pick) opens the PS5's web browser on the running game's Cheats
  screen, or on the start page with no game running. Settings warns that a
  similar tool has been reported to crash the home screen on some system
  software; if the PS5 stops while the shortcut is starting, it stays paused
  until you choose Try again.

Settings and diagnostics

• Beta (not yet tried on a real PS5). A Settings screen, from the
  gear button at the top of every screen, with the controller shortcut,
  Diagnostics, and Shut down CheatSpecter on the PS5 (with a
  confirmation, Cancel focused). On a phone, Disconnect moved there.
• Beta (not yet tried on a real PS5). Diagnostics keeps the last
  3,000 lines of what the page did (connections, cheats switched, cheat files
  loaded, saved and deleted, errors), at Problems only, Normal or
  Everything. Copy log and Save log add the app's version, the
  browser, the console and the game at the top, for a bug report.

Links

• Beta (not yet tried on a real PS5). The address in the browser follows
  the screen (#/game/<title ID>/cheats, #/library, #/learn,
  #/settings and so on), so Reload, Back, Forward and a saved link land on
  the same screen. A link to a game that is not running says so and offers
  the game that is.

Scripts and the MCP server

• Beta (not yet tried on a real PS5). Scripts: cs.search(type, value, {from, to, limit}) searches the game's memory for a value and returns the
  addresses, and cs.readText(address, max) reads text.
• Beta (not yet tried on a real PS5). The MCP server's set_cheat runs a
  script to the end and returns its log. Scripts that offer commands or keys
  still need the web app.
• Beta (not yet tried on a real PS5). A code cheat switched on somewhere
  else (another browser, the MCP server) is taken over when you switch it in
  the app, so it can be switched off. add_cheat now records the game's
  original bytes with a code cheat so this works.

Learn

• Lesson 7 (Save, name, group and share) explains the start set, how it
  differs from Keep on, and that community cheats for your exact game version
  are saved on the PS5. Lessons that described the old Save menu are updated.

Fixed

• Dialogs taller than the screen could not be scrolled in some cases (no
  dvh support in the browser, a dialog that set its own height, a paused
  game on the Debug tab moving dialogs down, the Android keyboard). The cause
  was the dialog itself being the part that scrolls. Now the whole backdrop
  scrolls, a tall dialog starts at its top, its buttons stay in view, and the
  focus goes back to what opened it.

Worth trying first on a real PS5

1. Open a game with a community table for its exact version: the table should be saved into the game's cheat file, and open from there (without waiting for GitHub) next time.
2. Switch a few cheats on, use … → Save what's on as this game's start set, restart the game, and read the start set report.
3. Switch something on and close the game within a minute: next time it should be held back, with a mark on its row, until you switch it on by hand.
4. Save (downloads the file) and … → Delete from PS5….
5. Reload the page on any screen; open a tall dialog with a phone held sideways and scroll it.
6. Settings → Diagnostics: Copy log. Settings → Shut down CheatSpecter on the PS5, then load the payload again.
7. The controller shortcut (off by default) in Settings. Read its warning first.

Full documentation is in the wiki.

CheatSpecter 0.4.2

Pre-release. Adds TV notifications to 0.4.1. Tested against the simulated console; not yet tried on a real PS5.

What is new

• The TV shows a notification when a cheat is switched on or off, or run, from the page, a hotkey or the MCP server ("Infinite ammo: ON").
• Several cheats switched together, such as a group, share one notification.
• "Restore everything" announces itself once.

Everything in 0.4.1 is included.

Install

1. Download cheatspecter-v0.4.2.elf below.
2. On the PS5, start ps5debug-NG.
3. Send the ELF to the console with your payload loader (for example a payload manager, or any ELF loader on port 9021).
4. On any device on the same network, open http://<PS5 IP>:8744.

Loading a newer copy replaces one that is already running. The optional .mcpb file adds CheatSpecter tools to the Claude desktop app.

Use at your own risk: changing a running game can crash it or damage a save. Tested only on one jailbroken PS5, on firmware 13.60.

Documentation: wiki · README

CheatSpecter 0.4.1

Pre-release. A quality pass over 0.4.0. The Learn page, search progress and feedback, the editors and the class-name helper were tried by hand on a real PS5 (firmware 13.60) in a current browser; most other features have still only been tested against a simulated console.

Fixed

• The Learn page crashed in current browsers ("l is not a function") when
  moving between lesson steps.
• A first search that found nothing gave no useful feedback. Every search now
  ends with what was searched, what came back and what to try next.
• Dialogs taller than the screen: they now scroll inside, and Save and Cancel
  stay in view. Editors no longer lose what you typed to a stray click.
• A browser console error on every closed connection to the console
  ("Close received after close").
• Copy buttons did nothing when the page is served from the PS5.
• The practice game covered the lesson's tools; it now sits beside them on
  wide screens and shrinks on short ones. A lesson's practice game no longer
  restarts between steps.
• Importing a damaged .cspector file could show a raw error; damaged
  entries are now left out and counted.
• A patch whose original bytes were shorter than its new bytes could be saved
  and would restore only part of the code.
• Error messages that vanished within a second on the Memory and Debug tabs.
• Memory that is not there was shown as zeros with no warning.
• The paused-game banner covered dialogs and could not be pressed over them.
• The header wrapped onto two lines on a phone; switches were hard to tap.

Improved

• Search progress is real: percentage, memory covered, matches so far, time
  elapsed and time left, with a Cancel button that works at any point.
• Searches run in smaller pieces, so progress moves steadily.
• "Ignore capitals" in text search is exact for any length of text.
• The page reconnects by itself when the debugger comes up.
• An error on one screen no longer blanks the whole page.
• The pointer finder can be canceled.
• Lessons: clearer text, a notice when an earlier step has not been done, and
  progress shown on "do it three times" goals.

Install

1. Download cheatspecter-v0.4.1.elf below.
2. On the PS5, start ps5debug-NG.
3. Send the ELF to the console with your payload loader (for example a payload manager, or any ELF loader on port 9021).
4. On any device on the same network, open http://<PS5 IP>:8744.

Loading a newer copy replaces one that is already running. The optional .mcpb file adds CheatSpecter tools to the Claude desktop app.

Use at your own risk: changing a running game can crash it or damage a save. Tested only on one jailbroken PS5, on firmware 13.60.

Documentation: wiki · README

CheatSpecter 0.4.0

Pre-release. Everything new here passes the automated tests against a simulated console and was checked in a browser, but none of it has been run on a real PS5 yet. New debugger features in particular can crash a game. If you want the build that has been used on hardware, take 0.3.0.

What is new

Find

• Text search: plain and wide (UTF-16) text, with ignore-case.
• Grouped search: several values that sit close together.
• Undo the last narrowing; "went up by" and "went down by"; a rounded match
  for decimals.
• "Where to search": pick which parts of memory are searched, or a custom range.
• Before/after compare of a region.
• Hex display, multi-select with Set all / Freeze all, copy address.

Debug (new tab)

• Pause and resume, breakpoints, single-step, editable registers (including
  XMM as float/double), the call chain, the stack and threads.
• "What does this code touch?": the addresses an instruction reads or writes,
  grouped by object.
• Structure viewer, and side-by-side compare of several objects.
• Pointer finder: paths through any module, and "check again after a restart".

Engine (new tab)

• Class, field and object names for Unreal Engine, Unity (IL2CPP), Godot,
  GameMaker and C++ games that keep their class names.
• Unreal: a list of console settings hidden from the menu (frame-rate cap,
  resolution scale and so on), which can be added as cheats.
• "Find hidden switches": searches any game for debug- and cheat-related text
  and shows what uses it.

Cheats

• Code cheats: assembly with labels, jumps, named variables that can be edited
  while the cheat is on, references between cheats, shared code, and several
  places under one switch.
• A rule builder ("if this, then that, otherwise ...") that writes the assembly.
• Scripts can declare named commands with inputs, react to hotkeys, and read
  and write code-cheat variables.
• "Keep on": patches and held values applied by the PS5 itself, with no
  browser open, and re-applied after the game restarts.
• Groups, dropdown values, hotkeys.
• "Guide me through my first cheat".
• Patterns are recorded when a cheat is saved; "re-find my cheats" after a
  game update.
• "Restore everything" and a notice when the game has crashed.
• Community cheats that use memory sections other than the main executable
  ("master code" cheats) now load.
• Export to SHN and MC4 as well as GoldHEN JSON.

Learn (new)

• Twelve lessons with a practice game that runs in the page. Lessons are
  downloaded from this repository only after you choose to load them; nothing
  is added to the ELF but the reader.

Payload

• GET /api/engine, POST /api/engine/reload: the keep-on engine.
• GET|PUT /api/prefs/<name>: small settings stored on the console.
• Idle connections are closed after 15 seconds.

MCP server

• 25 tools (was 16): addresses with module names, references, engine class
  tools, structure reading, text search, kept-cheat status.

Known limits

• The Unreal and Unity helpers have only been run against constructed test
  data.
• Code cheats and scripts cannot be kept on without the browser.
• The practice game does not run injected code, so the lesson on code with
  decisions is reading and questions only.

Install

1. Download cheatspecter-v0.4.0.elf below.
2. On the PS5, start ps5debug-NG.
3. Send the ELF to the console with your payload loader (for example a payload manager, or any ELF loader on port 9021).
4. On any device on the same network, open http://<PS5 IP>:8744.

Loading a newer copy replaces one that is already running. The optional .mcpb file adds CheatSpecter tools to the Claude desktop app.

Use at your own risk: changing a running game can crash it or damage a save. Tested only on one jailbroken PS5, on firmware 13.60.

Documentation: wiki · README

CheatSpecter 0.3.0

The first public build, and the one that has been used on a real PS5 (firmware 13.60, ps5debug-NG 1.3.2).

What is in it

• Game library with name, logo, platform badge and size; start a game from
  the browser.
• .cspector cheat files, saved on the PS5 (loaded automatically for the
  running game) or on your device.
• Community tables from etaHEN PS5 Cheats, the GoldHEN Cheat Repository and
  HEN Cheats Collection, in JSON, SHN and MC4.
• One switch can change several places.
• "Auto" search type.
• The payload replaces a running older copy of itself, names its process, and
  carries its version in the file name.
• MCP server for assistants, packaged as .mcpb.

Install

1. Download cheatspecter-v0.3.0.elf below.
2. On the PS5, start ps5debug-NG.
3. Send the ELF to the console with your payload loader (for example a payload manager, or any ELF loader on port 9021).
4. On any device on the same network, open http://<PS5 IP>:8744.

Loading a newer copy replaces one that is already running. The optional .mcpb file adds CheatSpecter tools to the Claude desktop app.

Use at your own risk: changing a running game can crash it or damage a save. Tested only on one jailbroken PS5, on firmware 13.60.

Documentation: wiki · README