onionHEN changelog

v0.9.0 · Oct 15, 2026

OnionHEN v0.9.0

OnionHEN is a homebrew enabler and Toolbox for jailbroken PS5 consoles, built on etaHEN. It prepares the system, injects a Toolbox into the home screen, and adds cheats, a game overlay, payload management, and background services.

Version: v0.9.0 is the stable release following v0.9.0-beta1 and v0.9.0-beta2. It brings together their changes since v0.0.13.

Firmware: Adds support for 13.0-13.6 and some 5.50 consoles, alongside the firmware supported by v0.0.13. Please include your exact firmware and console behavior when reporting a problem.

Download: OnionHEN.elf (Release build; SHA-256: 1f1f7c883d5d998be1d95d7d80b718f85180f8156f257661b0f445a7c6b7c212).

What changed since v0.0.13

Firmware compatibility

This release adds support for firmware 13.0-13.6 and some 5.50 consoles. Reports from real hardware are welcome.

Cheats

On firmware 4.03, opening the cheats menu for a game with no cheats could take about 40 seconds, then leave the home screen unresponsive until a forced reboot (#97, #103). The beta2 fix makes an empty menu return in a few seconds without stalling ShellUI. The reporter on #103 confirmed the problem was gone in an early beta2 build.

Long cheat names are also truncated on UTF-8 boundaries.

elfldr

v0.0.13 needed elfldr v0.22 because it loaded the cache through a file: URI. v0.9.0 sends a normal ELF to port 9021, so older elfldr builds work again. An external elfldr must still be listening on 9021.

Also

The bundled kstuff is kstuff-lite 1.11, up from 1.10 in v0.0.13.
Toolbox strings cover the remaining PS5 system languages. Startup toasts credit the author and thank contributors; the thanks toast can be turned off in Preferences. The About page lists testers and donors.
Daemon, bootstrapper, and ShellUI share /data/OnionHEN/OnionHEN.log, capped at 768 KiB with 3 backups.

Plugins, the overlay, payloads, Rest Mode, fan control, and app jailbreak retain their v0.0.13 behavior. See v0.0.13 for those features.

Quick start

You need an already-jailbroken PS5 and an external elfldr listening on port 9021. elfldr v0.22 is not required.
Send OnionHEN.elf with a payload sender, such as itsPLK's PS5 Payload Manager. Send it once after a cold boot.
Wait for OnionHEN to start. It may take a couple of seconds. Do not press anything while it is starting.
Open Settings to enter the Toolbox, or use the shortcut in the top-right corner of the home screen where available.

Do not load it again into a ShellUI that already ran OnionHEN. When reporting a problem, include the firmware version, what you did, and /data/OnionHEN/OnionHEN.log. For a cheats problem, also include /data/OnionHEN/OnionHEN_util_daemon.log.

Changelog

All changes since v0.0.13: v0.0.13...v0.9.0

Plugins

Place descriptor-bearing plugin ELFs in /data/OnionHEN/plugins. There is still no built-in FTP server. Install onionHEN-ftpsrv-plugin as /data/OnionHEN/plugins/FTPS00001.elf (TCP 1337 by default).

etaHEN plugins and OnionHEN plugins are not compatible.

kstuff

OnionHEN v0.9.0 bundles kstuff-lite 1.11.

Kstuff loads at startup by default. Turn that off from Toolbox > Plugins > Kstuff, or skip the bundled kstuff with an empty file at /data/OnionHEN/no_kstuff or /mnt/usb0/no_kstuff. Your own kstuff must already be running when OnionHEN starts.

A replacement payload goes at /data/OnionHEN/kstuff.elf.

Important

Hotkey conflicts

Do not run OnionHEN together with other hotkey-injecting plugins or tools.

This includes stock etaHEN, CheatRunner, PHU Tools, YonCore, and Kylin Core cheats. If one of those is already running, OnionHEN refuses to start. If another hotkey injector was loaded first, the console may hang or power off.

Testing and logs

Reboot before each test, then send OnionHEN.elf once. If a game has no cheats, its menu should open in a few seconds and the home screen should stay up. Include the relevant logs when reporting a regression.

File locations

| Purpose | Location |
| --- | --- |
| Cheats | /data/OnionHEN/cheats |
| Payloads | /data/OnionHEN/payloads |
| Plugins | /data/OnionHEN/plugins |
| Disable bundled kstuff | /data/OnionHEN/no_kstuff or /mnt/usb0/no_kstuff |
| Replacement kstuff | /data/OnionHEN/kstuff.elf |
| Main log | /data/OnionHEN/OnionHEN.log |
| Utility daemon log | /data/OnionHEN/OnionHEN_util_daemon.log |
| Crash log | /data/OnionHEN/OnionHEN_crash.log |

FAQ

Where did the built-in FTP server go?

It is still not inside OnionHEN. Install onionHEN-ftpsrv-plugin as /data/OnionHEN/plugins/FTPS00001.elf.

Can I run this next to etaHEN?

No. Same rule as v0.0.13. OnionHEN exits if etaHEN, Yoncore, kylin-core, or CheatRunner is already running.

Support

Like the project? Consider supporting it on Ko-fi:

![Support OnionHEN on Ko-fi](https://ko-fi.com/0xp0co)

国内简中用户也可以扫描下方二维码进行捐赠：

| 支付宝（国内） | 微信（国内） |
| --- | --- |
| <img src="https://raw.githubusercontent.com/aydencharles/onionHEN/main/assets/donation_alipay_cn.JPG" width="200" alt="支付宝"/> | <img src="https://raw.githubusercontent.com/aydencharles/onionHEN/main/assets/donation_wechat_cn.JPG" width="200" alt="微信"/> |

Credits

Thanks to the etaHEN team. OnionHEN is built on etaHEN.

Contributors

Hexwell
Kevin Huerta - FTP, Remote Play, ShadowMount+, DPI, PS4 FPS (#23, #66, #75)
Modmycon - Thai locale (#14)

Testers

即食面, 雨之声, 大饼电玩, 安定区, 随风, 麒麟, 尼克库尔曼, 云, 啊烦, 小小蔡, B站谢锡榆, 荆枫, 苏打先森, 噢, 天天向上

Donors

爱过流星, 狂爱龙卷風, 石之心, 小猫小子, B站谢锡榆

Referenced

kstuff-lite - EchoStretch, sleirsgoevy, and contributors; this release bundles 1.11
elfldr - first-hop loader on port 9021
onionHEN-ntp-plugin
onionHEN-ftpsrv-plugin
onionHEN-shadowmountplus-plugin (WIP)
onionHEN-dpiv2-plugin (WIP)
HEN-Cheats-Collection - TeeKay87; Chinese mirror by PS5_Xiexiyu
PHU Games Tools - FPS sampling used by the game overlay
ps5-payload-manager - itsplk

v0.0.13 · Sep 11, 2026

OnionHEN v0.0.13

Supported firmware: 4.03 – 12.70

Breaking changes

elfldr v0.22+ required for this release

v0.0.13 speeds up later boots by caching the decompressed bootstrapper, then asking the external elfldr on port 9021 to load that file through a file: URI.

URI loading (file://, http://, https://) was added in elfldr v0.22. Older elfldr builds accept the connection but do not launch the payload, so OnionHEN never starts.

This is a compatibility bug in v0.0.13. The next OnionHEN release will stop using a URI for this first hop.

Until then, do one of the following:

Upgrade the external elfldr on port 9021 to v0.22 or later, then send OnionHEN.elf.
Send a current elfldr payload first so port 9021 is already running a new enough loader, then send OnionHEN.elf.

Built-in FTP server removed

The built-in FTP server from v0.0.12 is gone. ftp.autoload and ftp.port are no longer in config.ini. Install the replacement onionHEN-ftpsrv-plugin as /data/OnionHEN/plugins/FTPS00001.elf. The listener is enabled by default on TCP 1337.

Quick start

You need an already-jailbroken PS5 and an external elfldr (the first-hop loader) listening on port 9021.
Send OnionHEN.elf using a payload sender, such as itsPLK's PS5 Payload Manager.
Wait for OnionHEN to start. It may take a couple of seconds, so just wait and don't do anything while it is starting.
Open Settings on your PS5 to enter the Toolbox, or use the shortcut in the top-right corner of the home screen.

What's new

External ELF plugins

OnionHEN can now discover, start, stop, and remove descriptor-bearing plugin ELFs from:

/data/OnionHEN/plugins

Toolbox → Plugins lists installed plugins, with per-plugin session start/stop, next-boot auto-start, settings links, and a progress dialog.

etaHEN plugins and OnionHEN plugins are not compatible. etaHEN / itemzflow plugins will not run on OnionHEN, and OnionHEN ELF plugins will not run on etaHEN. Do not put etaHEN plugins in /data/OnionHEN/plugins.

The plugins that are ready to use:

| Feature | Plugin | Install as |
| --- | --- | --- |
| NTP time sync | onionHEN-ntp-plugin | /data/OnionHEN/plugins/NTPS00001.elf |
| FTP server | onionHEN-ftpsrv-plugin | /data/OnionHEN/plugins/FTPS00001.elf |

These optional plugins exist but are still WIP:

| Feature | Plugin | Install as |
| --- | --- | --- |
| ShadowMount+ | onionHEN-shadowmountplus-plugin | /data/OnionHEN/plugins/SMPL00001.elf |
| DPI v2 (network PKG installer) | onionHEN-dpiv2-plugin | /data/OnionHEN/plugins/DPIV00001.elf |

The built-in FTP server from v0.0.12 is removed. ftp.autoload and ftp.port are no longer in config.ini. Install the replacement onionHEN-ftpsrv-plugin as /data/OnionHEN/plugins/FTPS00001.elf. The listener is enabled by default on TCP 1337.

See #74 and #66.

Game overlay: fan duty, order, and text size

Toolbox → Overlay can now:

Show fan duty (percent)
Set overlay text size: small / medium / large
Reorder metrics (FPS, CPU, GPU, memory, IP, fan)

Or in config.ini:

[overlay]
show_fan_duty=false
font_size=medium
order=fps,cpu,gpu,memory,ip,fan

PS4 backward-compatible titles now measure FPS through a GNM detour, so the game overlay is usable on PS4 games as well as PS5 titles.

Payload priority and auto-start delay

Each payload has a detail page with:

Load priority — 0–999; higher values start first
Auto-start delay — 0–300 seconds before that payload starts

Settings are stored next to the ELF as <name>.elf.json. Auto-start still uses the matching .auto_start marker.

Refuse start when another HEN is already running

OnionHEN now exits instead of loading if it finds a conflicting payload already running, including etaHEN, Yoncore, kylin-core, and CheatRunner.

Do not send OnionHEN while those tools are still up. The console can hang or power off if another hotkey injector is already in ShellUI.

Rest Mode Toolbox delay

After Rest Mode, OnionHEN still waits for trophy SPRX, then waits an extra configurable delay before re-injecting the Toolbox. That extra wait is Rest Mode resume only (not cold start).

Default is 10 seconds (0–255). Set it in Toolbox → System → Rest Mode, or:

[rest_mode]
resume_reinject_delay_seconds=10

Raise this if the Toolbox or home screen still glitches after waking.

Other improvements

Faster later boots: the unpacker caches the decompressed bootstrapper at /user/data/OnionHEN/onionhen.elf and skips LZMA when the cache still matches.
Cheat toggles keep their enabled state; browse list and in-game runtime list are separate.
Toolbox follows the PS5 system language after injection, and confirmation dialogs show their messages.
Plugin and cheat progress pages return to the previous screen when the job finishes.
App jailbreak publishes a Big App as soon as EXEC identity is usable, instead of waiting for the later running-Big-App query.

Changelog

All changes since v0.0.12: v0.0.12...v0.0.13

Plugins

Place descriptor-bearing plugin ELFs in:

/data/OnionHEN/plugins

Plain payloads in /data/OnionHEN/payloads are not plugins. OnionHEN only starts ELFs that carry a valid .onion_plugin descriptor.

etaHEN plugins and OnionHEN plugins are not compatible. etaHEN / itemzflow plugins will not load here, and OnionHEN plugins will not load on etaHEN.

From Toolbox → Plugins you can:

Start or stop a plugin for the current session
Enable auto-start for the next OnionHEN launch
Open the plugin's own settings page when it provides one
Delete the plugin ELF

Kstuff stays a built-in service on that page.

The NTP plugin is ready: install onionHEN-ntp-plugin as /data/OnionHEN/plugins/NTPS00001.elf. It syncs the system clock from public NTP servers, which helps consoles whose RTC battery is dead or missing.

The FTP plugin is ready: install onionHEN-ftpsrv-plugin as /data/OnionHEN/plugins/FTPS00001.elf. It starts the FTP listener on TCP 1337 by default.

ShadowMount+ and DPI v2 plugins are still WIP.

Cheats

OnionHEN loads cheat files directly from the console storage at runtime.

Supported formats

.json
.shn
.mc4
.ShnExt

Installation

Place cheat files directly in:

/data/OnionHEN/cheats

Subfolders are not supported.

Cheat filenames follow:

<TITLE_ID>_<VERSION>[_<PROCESS>][_<SOURCE_ID>].<EXTENSION>

PROCESS is optional and restricts the file to that process. SOURCE_ID is an optional 8-hex segment that distinguishes files from different sources. All compatible files for the title/version/process are loaded together, regardless of format.

For example:

PPSA02225_02.024.000.json

The cheat file must match the game's title ID and version. Using a cheat from another game version may cause it not to load, not to work, or behave unexpectedly.

Download

From the Toolbox Game Tools page, you can download the cheat collection over HTTPS. OnionHEN installs the json/, shn/, and mc4/ files into /data/OnionHEN/cheats, keeping their original names. The source is HEN-Cheats-Collection. auto uses cnb.cool when the UI/system language is Simplified Chinese, otherwise GitHub.

Thanks to TeeKay87 (official repo) and PS5_Xiexiyu (Chinese mirror).

Game overlay

From Toolbox → Overlay you can enable the game overlay and pick:

Screen edge: top or bottom
Metric alignment: left, center, or right
Text size: small, medium, or large
Metric order
Which metrics to show: CPU, GPU, RAM, FPS, network info, fan duty

PS4 backward-compatible games are included in FPS sampling.

Payloads

Place standalone payloads in:

/data/OnionHEN/payloads

Only plain .elf files are supported. Auto-start can be turned on in the Toolbox; OnionHEN remembers that choice with a matching .auto_start file next to the ELF.

Open a payload for load priority (0–999) and auto-start delay (0–300 seconds). Those values live in a sidecar <name>.elf.json.

Plugins belong in /data/OnionHEN/plugins/, not here.

Fan control

OnionHEN includes fan control with a configurable temperature threshold. Current fan duty can also be shown on the game overlay.

App jailbreak

Allowlisted homebrew applications can request additional privileges from the OnionHEN daemon. Supported applications such as Xplorer can use this mechanism to obtain the privileges they require.

kstuff

OnionHEN v0.0.13 bundles kstuff-lite 1.10.

Kstuff loads at startup by default. Turn that off from Toolbox → Plugins → Kstuff, or skip the bundled kstuff by creating an empty file:

/data/OnionHEN/no_kstuff

or:

/mnt/usb0/no_kstuff

Your own kstuff must already be running when OnionHEN starts.

To use a replacement kstuff payload, place it at:

/data/OnionHEN/kstuff.elf

Not included compared with etaHEN

The following etaHEN features are not currently included:

itemzflow plugin system. OnionHEN's ELF plugin runtime is a separate system; etaHEN plugins and OnionHEN plugins are not compatible.
.prx / .sprx plugin loading in the Toolbox. The SPRX catalog UI is present in the tree but hidden because it is untested.

Important

Hotkey conflicts

Do not run OnionHEN together with other hotkey-injecting plugins or tools.

This includes:

Stock etaHEN
CheatRunner
PHU Tools
YonCore
Kylin Core cheats

If another hotkey-injecting component is loaded before OnionHEN, the console may hang or power off. OnionHEN now refuses to start when it can see etaHEN, Yoncore, kylin-core, wmdw-jwm, or CheatRunner already running.

File locations

FAQ

Where did the built-in FTP server go?

It is no longer inside OnionHEN. Install the replacement onionHEN-ftpsrv-plugin as /data/OnionHEN/plugins/FTPS00001.elf. The listener is enabled by default on TCP 1337.

My cheats don't load.

Make sure the cheat file:

Uses a supported format.
Is placed directly in /data/OnionHEN/cheats.
Is not inside a subfolder.
Uses a <TITLE_ID>_<VERSION> filename, with optional process and source ID.
Matches the game version you are running.

You can also download the community collection from the Toolbox.

Can I use etaHEN plugins with OnionHEN?

No. etaHEN plugins and OnionHEN plugins are not compatible. OnionHEN only loads descriptor-bearing ELFs from /data/OnionHEN/plugins. etaHEN / itemzflow plugins will not run, and OnionHEN plugins will not run on etaHEN.

Can I load `.prx` / `.sprx` plugins like GoldHEN?

Not yet. The catalog UI is hidden until it is tested.

See #17.

Can I run OnionHEN alongside etaHEN or other hotkey tools?

No. OnionHEN should not be used together with other hotkey-injecting tools such as stock etaHEN, CheatRunner, PHU Tools, YonCore, or Kylin Core cheats. If one of those is already running, OnionHEN will refuse to start.

The Toolbox glitches after Rest Mode.

Increase Toolbox → System → Rest Mode → Delay toolbox activation, or set rest_mode.resume_reinject_delay_seconds in config.ini (default 10, max 255).

Support

Like the project? Consider supporting it on Ko-fi:

![Support OnionHEN on Ko-fi](https://ko-fi.com/0xp0co)

For Chinese users, you can also scan the QR codes below to donate:

国内简中用户也可以扫描下方二维码进行捐赠：

Credits

Thanks to the etaHEN team for their work and for making OnionHEN possible.

OnionHEN is built on top of etaHEN.

Contributors

Hexwell
Kevin Huerta — FTP, Remote Play, ShadowMount+, DPI, PS4 FPS (#23, #66, #75)
Modmycon — Thai locale (#14)

Referenced

kstuff-lite — EchoStretch, sleirsgoevy, and contributors; bundled kstuff and Rest Mode Toolbox recovery
onionHEN-ntp-plugin — optional external NTP time-sync plugin
onionHEN-ftpsrv-plugin — optional external FTP server plugin based on drakmor/ftpsrv
onionHEN-shadowmountplus-plugin — optional external ShadowMount+ plugin (WIP)
onionHEN-dpiv2-plugin — optional external DPI v2 package installer plugin (WIP)
HEN-Cheats-Collection — TeeKay87; the cheat catalog downloaded by the Toolbox
PHU Games Tools — ArkSama; FPS sampling used by the game overlay
ps5-payload-manager — itsplk; Rest Mode listen-socket recovery

v0.0.12 · Aug 31, 2026

OnionHEN v0.0.12

OnionHEN is a homebrew enabler and Toolbox for jailbroken PS5 consoles, built on etaHEN. It prepares the system, injects a Toolbox into the home screen, and adds cheats, in-game overlays, payload management, and background services.

Supported firmware: 4.03 – 12.70

Quick start

You need an already-jailbroken PS5 and an external elfldr (the first-hop loader) listening on port 9021.
Send OnionHEN.elf using a payload sender, such as itsPLK's PS5 Payload Manager.
Wait for OnionHEN to start. It may take a couple of seconds, so just wait and don't do anything while it is starting.
Open Settings on your PS5 to enter the Toolbox, or use the shortcut in the top-right corner of the home screen.

What's new

Multiple cheat files work together

For one game, you can now use cheat files of different formats and from different sources at the same time. JSON, SHN, MC4, and ShnExt files for the same title can coexist, and all compatible ones are loaded together. Previously, only one format was used per game.

See #60.

Cheat catalog keeps original file names

After downloading the community cheat collection from the Toolbox, the installed files keep their original names.

See #59.

Monitor bar alignment

The monitor bar metrics can be aligned to the left, center, or right of the screen edge. Choose it in Toolbox → Overlay → Monitor bar alignment, or in config.ini:

[overlay]
align=center

align accepts left, center, or right (default center).

Changelog

All changes since v0.0.11:

7092dd6 feat(cheats): load all compatible sources together
a92e8a6 refactor(cheats): drop deprecated hash aliases
6803b4a refactor(cheats): copy HENCC files without renaming
10779c1 fix(cheats): unescape titles and localize toasts
b344e2d feat(overlay): add left/center/right metric align
d99db5a feat: merge dev — Cheat handling and overlay customization (PR #65)

Full diff: v0.0.11...v0.0.12

Cheats

OnionHEN loads cheat files directly from the console storage at runtime.

Supported formats

.json
.shn
.mc4
.ShnExt

Installation

Place cheat files directly in:

/data/OnionHEN/cheats

Subfolders are not supported.

Cheat filenames follow:

<TITLE_ID>_<VERSION>[_<PROCESS>][_<SOURCE_ID>].<EXTENSION>

For example:

PPSA02225_02.024.000.json

The cheat file must match the game's title ID and version. Using a cheat from another game version may cause it not to load, not to work, or behave unexpectedly.

Download

Overlay

From Toolbox → Overlay you can enable the monitor bar and pick:

Screen edge: top or bottom
Metric alignment: left, center, or right
Which metrics to show: CPU, GPU, RAM, FPS, network info

Payloads

Place standalone payloads in:

/data/OnionHEN/payloads

Only plain .elf files are supported. Auto-start can be turned on in the Toolbox; OnionHEN remembers that choice with a matching .auto_start file next to the ELF.

Fan control

OnionHEN includes fan control with a configurable temperature threshold.

App jailbreak

Allowlisted homebrew applications can request additional privileges from the OnionHEN daemon. Supported applications such as Xplorer can use this mechanism to obtain the privileges they require.

kstuff

OnionHEN v0.0.12 bundles kstuff-lite 1.10.

Kstuff loads at startup by default. Turn that off from Toolbox → Plugins → Kstuff, or skip the bundled kstuff by creating an empty file:

/data/OnionHEN/no_kstuff

or:

/mnt/usb0/no_kstuff

Your own kstuff must already be running when OnionHEN starts.

To use a replacement kstuff payload, place it at:

/data/OnionHEN/kstuff.elf

Not included compared with etaHEN

The following etaHEN features are not currently included:

itemzflow plugin system.
.prx / .sprx plugin loading.

Known issues

Notifications / shortcuts on some firmware

Notifications or shortcuts may not appear on some firmware versions. This has been reported on firmware 4.03–6.xx.

See #11.

Important

Hotkey conflicts

Do not run OnionHEN together with other hotkey-injecting plugins or tools.

This includes:

Stock etaHEN
CheatRunner
PHU Tools
YonCore
Kylin Core cheats

If another hotkey-injecting component is loaded before OnionHEN, the console may hang or power off.

File locations

| Purpose | Location |
| --- | --- |
| Cheats | /data/OnionHEN/cheats |
| Payloads | /data/OnionHEN/payloads |
| Disable bundled kstuff | /data/OnionHEN/no_kstuff or /mnt/usb0/no_kstuff |
| Replacement kstuff | /data/OnionHEN/kstuff.elf |
| Crash log | /data/OnionHEN/OnionHEN_crash.log |

FAQ

My cheats don't load.

Make sure the cheat file:

Uses a supported format.
Is placed directly in /data/OnionHEN/cheats.
Is not inside a subfolder.
Uses a <TITLE_ID>_<VERSION> filename, with optional process and source ID.
Matches the game version you are running.

You can also download the community collection from the Toolbox.

Notifications or shortcuts don't appear.

This has been reported on firmware 4.03–6.xx and is still being investigated.

See #11.

Can I load `.prx` / `.sprx` plugins like GoldHEN?

Not yet.

See #17.

Can I run OnionHEN alongside etaHEN or other hotkey tools?

No. OnionHEN should not be used together with other hotkey-injecting tools such as stock etaHEN, CheatRunner, PHU Tools, YonCore, or Kylin Core cheats.

Support

Like the project? Consider supporting it on Ko-fi:

For Chinese users, you can also scan the QR codes below to donate:

国内简中用户也可以扫描下方二维码进行捐赠：

Credits

Thanks to the etaHEN team for their work and for making OnionHEN possible.

OnionHEN is built on top of etaHEN.

Contributors

Hexwell
Kevin Huerta — FTP and Remote Play (#23)
Modmycon — Thai locale (#14)

Referenced

kstuff-lite — EchoStretch, sleirsgoevy, and contributors; bundled kstuff and Rest Mode Toolbox recovery
ftpsrv — drakmor and upstream contributors; in-process PS5 FTP server
HEN-Cheats-Collection — TeeKay87; the cheat catalog downloaded by the Toolbox
PHU Games Tools — ArkSama; FPS sampling used by the monitor bar
ps5-payload-manager — itsplk; Rest Mode listen-socket recovery

v0.0.11 · Aug 26, 2026

Supported firmware: 4.03 – 12.70

Quick start

You need an already-jailbroken PS5 and an external elfldr (the first-hop loader) listening on port 9021.
Send OnionHEN.elf using a payload sender, such as itsPLK's PS5 Payload Manager.
Wait for OnionHEN to start. It may take a couple of seconds, so just wait and don't do anything while it is starting.
Open Settings on your PS5 to enter the Toolbox, or use the shortcut in the top-right corner of the home screen.

What's new

Rest Mode resume

The Toolbox, Unix IPC listeners, and the built-in FTP server recover after Rest Mode. OnionHEN watches for the new ShellUI process and re-injects the Toolbox when the console wakes.

Built-in FTP server

A PS5 FTP server is built into OnionHEN and controlled from Toolbox → Plugins → FTP server.

One switch starts or stops it for the current session.
A separate switch starts it the next time OnionHEN launches.
The listen port is configurable (1–65535, default 1337).

FTP is off by default on next boot.

Remote Play pairing

Toolbox → Network → Remote Play enables the native PS5 Remote Play service, shows a pairing PIN, and registers a client.

The current account must already be activated. If it is not, OnionHEN sends you to Toolbox → Account → Account activation first.

This is pairing and device registration only. Video streaming stays on Sony's native Remote Play service.

FPS on the monitor bar

The in-game overlay can show FPS together with CPU, GPU, RAM, temperatures, and network info.

Cheat catalog download

The Toolbox can download the community cheat collection and install it into /data/OnionHEN/cheats.

The source is HEN-Cheats-Collection. auto uses cnb.cool when the UI/system language is Simplified Chinese, otherwise GitHub.

Plugin manager

Toolbox → Plugins now manages built-in services:

Kstuff — fSELF / fPKG support; loaded at startup by default
FTP server — session start/stop, next-boot autoload, and port

Thai language

The Toolbox now includes Thai. When language is set to System, the Toolbox still follows the console language.

Other improvements

Cheat files can include an optional process name and 8-hex hash in the filename.
Running user payloads are left running; later launch or auto-start requests do not kill an already-recorded instance.
Daemon crash logs are kept across restarts at /data/OnionHEN/OnionHEN_crash.log.

FTP server

Open Toolbox → Plugins → FTP server.

The server includes upstream ftpsrv commands such as KILL, SELF, SCHK, MTRW, and AUTHID where the firmware supports them.

If you also place a user payload named ftpsrv or ftpsrv-ps5 in /data/OnionHEN/payloads, it is treated as a normal payload. If two FTP services use the same TCP port, only one can bind it.

Remote Play

Activate the current account from Toolbox → Account → Account activation if needed.
Open Toolbox → Network → Remote Play.
Enter the displayed PIN in the official Remote Play client while the page stays open.

Cheats

OnionHEN loads cheat files directly from the console storage at runtime.

Supported formats

.json
.shn
.mc4
.ShnExt

Installation

Place cheat files directly in:

/data/OnionHEN/cheats

Subfolders are not supported.

Cheat filenames follow:

<TITLE_ID>_<VERSION>[_<PROCESS>][_<HASH>].<EXTENSION>

Omit PROCESS for eboot.bin. Omit HASH when the file is not build-specific.

For example:

PPSA02225_02.024.000.json

A process-scoped file wins over a generic TITLE_ID_VERSION file. Format priority is json, then shn, then mc4, then ShnExt.

The cheat file must match the game's title ID and version. Using a cheat from another game version may cause it not to load, not to work, or behave unexpectedly.

Download

From the Toolbox Game Tools page, you can download the cheat collection over HTTPS. OnionHEN extracts only the cheats/ tree and flattens it into /data/OnionHEN/cheats. You can still add or replace files there yourself.

Troubleshooting

If a cheat is not detected, check:

The file is directly inside /data/OnionHEN/cheats.
The file is not inside a subfolder.
The extension is supported.
The filename uses the correct TITLE_ID and game version.

If the file is detected but the cheat does not work, make sure the cheat itself was created for the exact game build you are running.

Payloads

Place standalone payloads in:

/data/OnionHEN/payloads

Only plain .elf files are supported. Auto-start can be turned on in the Toolbox; OnionHEN remembers that choice with a matching .auto_start file next to the ELF.

Fan control

OnionHEN includes fan control with a configurable temperature threshold.

App jailbreak

Allowlisted homebrew applications can request additional privileges from the OnionHEN daemon. Supported applications such as Xplorer can use this mechanism to obtain the privileges they require.

kstuff

OnionHEN v0.0.11 bundles kstuff-lite 1.10.

Kstuff loads at startup by default. Turn that off from Toolbox → Plugins → Kstuff, or skip the bundled kstuff by creating an empty file:

/data/OnionHEN/no_kstuff

or:

/mnt/usb0/no_kstuff

Your own kstuff must already be running when OnionHEN starts.

To use a replacement kstuff payload, place it at:

/data/OnionHEN/kstuff.elf

Not included compared with etaHEN

The following etaHEN features are not currently included:

itemzflow plugin system.
.prx / .sprx plugin loading.

Known issues

Notifications / shortcuts on some firmware

Notifications or shortcuts may not appear on some firmware versions. This has been reported on firmware 4.03–6.xx.

See #11.

Important

Hotkey conflicts

Do not run OnionHEN together with other hotkey-injecting plugins or tools.

This includes:

Stock etaHEN
CheatRunner
PHU Tools
YonCore
Kylin Core cheats

If another hotkey-injecting component is loaded before OnionHEN, the console may hang or power off.

File locations

FAQ

My cheats don't load.

Make sure the cheat file:

Uses a supported format.
Is placed directly in /data/OnionHEN/cheats.
Is not inside a subfolder.
Uses a <TITLE_ID>_<VERSION> filename, with optional process and hash.
Matches the game version you are running.

You can also download the community collection from the Toolbox.

Notifications or shortcuts don't appear.

This has been reported on firmware 4.03–6.xx and is still being investigated.

See #11.

Can I load `.prx` / `.sprx` plugins like GoldHEN?

Not yet.

See #17.

Can I run OnionHEN alongside etaHEN or other hotkey tools?

No. OnionHEN should not be used together with other hotkey-injecting tools such as stock etaHEN, CheatRunner, PHU Tools, YonCore, or Kylin Core cheats.

Credits

Thanks to the etaHEN team for their work and for making OnionHEN possible.

OnionHEN is built on top of etaHEN.

Contributors

Hexwell
Kevin Huerta — FTP and Remote Play (#23)
Modmycon — Thai locale (#14)

Referenced

kstuff-lite — EchoStretch, sleirsgoevy, and contributors; bundled kstuff and Rest Mode Toolbox recovery
ftpsrv — drakmor and upstream contributors; in-process PS5 FTP server
HEN-Cheats-Collection — TeeKay87; the cheat catalog downloaded by the Toolbox
PHU Games Tools — ArkSama; FPS sampling used by the monitor bar
ps5-payload-manager — itsplk; Rest Mode listen-socket recovery

v0.0.10 · Aug 26, 2026

Supported firmware: 4.03 – 12.70

Quick start

You need an already-jailbroken PS5 and an external elfldr (the first-hop loader) listening on port 9021.
Send OnionHEN.elf using a payload sender, such as itsPLK's PS5 Payload Manager.
Wait for OnionHEN to start. It may take a couple of seconds, so just wait and don't do anything while it is starting.
Open Settings on your PS5 to enter the Toolbox, or use the shortcut in the top-right corner of the home screen.

What's new

New Toolbox languages

The Toolbox now supports 13 languages:

English
Traditional Chinese
Japanese
French
German
Korean
Spanish (Spain)
Spanish (Latin America)
Brazilian Portuguese
Italian
Russian
Polish
Arabic (trial)

When the language is set to System, the Toolbox follows your console's language.

> Arabic: Arabic support is currently experimental. Right-to-left (RTL) text layout has not yet been applied to the Settings page.

Other improvements

More reliable injection.
Improved in-game monitor bar / game overlay with CPU/GPU usage and temperature, RAM, and network information.
Payload manager with optional auto-start.
Fan control with a configurable temperature threshold.
App jailbreak for allowlisted homebrew applications such as Xplorer.
Full cheat engine with runtime support for JSON, SHN, MC4, and ShnExt files.
Home-screen entry in the top-right corner for quick access to the Toolbox.

Cheats

OnionHEN loads cheat files directly from the console storage at runtime.

Supported formats

.json
.shn
.mc4
.ShnExt

Installation

Place cheat files directly in:

/data/OnionHEN/cheats

Subfolders are not supported.

Cheat filenames must follow:

<TITLE_ID>_<VERSION>.<EXTENSION>

For example:

PPSA02225_02.024.000.json

For a game with:

TITLE_ID: PPSA02225
VERSION:   02.024.000

the file should be:

/data/OnionHEN/cheats/PPSA02225_02.024.000.json

Then launch the game and open the OnionHEN in-game cheat interface to select and enable the available cheats.

The cheat file must match the game's title ID and version. Using a cheat from another game version may cause it not to load, not to work, or behave unexpectedly.

Troubleshooting

If a cheat is not detected, check:

The file is directly inside /data/OnionHEN/cheats.
The file is not inside a subfolder.
The extension is supported.
The filename uses the correct TITLE_ID and game version.

If the file is detected but the cheat does not work, make sure the cheat itself was created for the exact game build you are running.

Cheat repository

OnionHEN does not include a built-in cheat repository. You must obtain compatible cheat files separately and place them in /data/OnionHEN/cheats.

A built-in cheat repository is under consideration for a future release.

Payloads

Place payloads in:

/data/OnionHEN/payloads

The Toolbox can browse and launch available payloads, and payloads can optionally be configured to auto-start when OnionHEN is loaded.

> Known issue: Auto-start may become unreliable when many payloads are configured to start automatically.

Fan control

OnionHEN includes fan control with a configurable temperature threshold.

App jailbreak

Allowlisted homebrew applications can request additional privileges from the OnionHEN daemon. Supported applications such as Xplorer can use this mechanism to obtain the privileges they require.

kstuff

OnionHEN v0.0.10 bundles kstuff-lite 1.10.

To skip the bundled kstuff, create an empty file:

/data/OnionHEN/no_kstuff

Your own kstuff must already be running when OnionHEN starts.

To use a replacement kstuff payload, place it at:

/data/OnionHEN/kstuff.elf

Not included compared with etaHEN

The following etaHEN features are not currently included:

itemzflow plugin system.
Reliable Rest Mode resume.
.prx / .sprx plugin loading.
Built-in cheat repository.
FPS counter.

Some of these features are planned or under consideration for future releases.

Known issues

Rest Mode resume

Rest Mode resume is not yet reliable. The Toolbox may not automatically come back after waking the console.

If this happens, reload OnionHEN.elf from your payload manager. If necessary, restart the console and try again.

See #1 and #5.

Overlay / notifications / shortcuts

The in-game overlay, notifications, or shortcuts may not appear on some firmware versions or hardware configurations. This has been reported on PS5 Slim with firmware 11.40 and firmware versions 4.03–6.xx.

These issues are currently under investigation.

See #6 and #11.

Auto-start payloads

A payload configured for auto-start may turn itself off when many payloads are configured to start automatically.

See #19.

Important

Hotkey conflicts

Do not run OnionHEN together with other hotkey-injecting plugins or tools.

This includes:

Stock etaHEN
CheatRunner
PHU Tools
YonCore
Kylin Core cheats

If another hotkey-injecting component is loaded before OnionHEN, the console may hang or power off.

File locations

| Purpose | Location |
| --- | --- |
| Cheats | /data/OnionHEN/cheats |
| Payloads | /data/OnionHEN/payloads |
| Disable bundled kstuff | /data/OnionHEN/no_kstuff |
| Replacement kstuff | /data/OnionHEN/kstuff.elf |

FAQ

The Toolbox disappeared after Rest Mode.

Rest Mode resume is a known limitation. Reload OnionHEN from your payload manager. If necessary, restart the console and try again.

See #1 and #5.

My cheats don't load.

Make sure the cheat file:

Uses a supported format.
Is placed directly in /data/OnionHEN/cheats.
Is not inside a subfolder.
Uses the correct <TITLE_ID>_<VERSION> filename.
Matches the game version you are running.

See #4 and #12.

The FPS isn't showing.

The current release does not include an FPS counter. FPS monitoring is on the roadmap.

See #7 and #13.

The overlay, notifications, or shortcuts don't appear.

This is a known issue on some firmware versions and hardware configurations and is currently under investigation.

See #6 and #11.

Can I load `.prx` / `.sprx` plugins like GoldHEN?

Not yet. Plugin loading and in-game cheat menus are currently on the roadmap.

See #15 and #17.

Will you add a built-in cheat repository?

This has been requested and is currently under consideration.

See #10.

One of my auto-start payloads keeps turning itself off.

This is a known bug when many payloads are configured to auto-start.

See #19.

Can I run OnionHEN alongside etaHEN or other hotkey tools?

No. OnionHEN should not be used together with other hotkey-injecting tools such as stock etaHEN, CheatRunner, PHU Tools, YonCore, or Kylin Core cheats.

Credits

Thanks to the etaHEN team for their work and for making OnionHEN possible.

OnionHEN is built on top of their work.

v0.0.9 · Aug 26, 2026

OnionHEN v0.0.9

A PS5 homebrew enabler based on etaHEN.

Supported firmware: 4.03 – 12.7

Load OnionHEN.elf with itsPLK's PS5 Payload Manager.

What's new

Toggle the translucent background on the in-game monitor bar (3088689)
Optional Arabic UI (trial). Switch it in Toolbox language, or set toolbox.language=ar. The Settings page is still left-to-right (5c07eee)
Fan temperature threshold now stays applied (it used to revert to the system curve) (550302f)
Settings version string shows OnionHEN, not OrionHEN (9ae9af1)
Leftover Chinese labels in the English UI are translated (fc2368d)
Cheat / notification toasts follow the Toolbox language after you change it (5c07eee)

Compared with etaHEN

OnionHEN includes:

A full cheat engine, matching Kylin Core
A Toolbox with English, Simplified Chinese, and trial Arabic
A home-screen entry in the top-right corner, so you don't have to open it from Settings
More reliable injection
Payload manager with auto-start
Fan control with a custom temperature threshold
App jailbreak for Xplorer
An improved in-game monitor bar

Not included:

The itemzflow plugin system
Reliable Rest Mode resume — if resume fails, reload OnionHEN from the payload manager

Notes

Do not run OnionHEN together with other plugins that inject hotkeys, including stock etaHEN, CheatRunner, PHU Tools, YonCore, and Kylin Core cheats. Load those first and the console can hang or power off.

Cheats: /data/OnionHEN/cheats (no subfolders)
Payloads: /data/OnionHEN/payloads
Bundled kstuff is kstuff-lite 1.10. Create /data/OnionHEN/no_kstuff to skip it (your own kstuff must already be running), or put a replacement at /data/OnionHEN/kstuff.elf.

Credits

Thanks to the etaHEN team. OnionHEN is built on their work.

v0.0.8 · Aug 26, 2026

OnionHEN v0.0.8

A PS5 homebrew enabler based on etaHEN.

Supported firmware: 4.03 – 12.7

Load OnionHEN.elf with itsPLK's PS5 Payload Manager.

Compared with etaHEN

OnionHEN includes:

A full cheat engine, matching Kylin Core
A Toolbox with English and Simplified Chinese support
A home-screen entry in the top-right corner, so you don't have to open it from Settings
More reliable injection
Payload manager with auto-start
Fan control with a custom temperature threshold
App jailbreak for Xplorer
An improved in-game monitor bar

Game monitor bar

Not included:

The itemzflow plugin system
Reliable Rest Mode resume — if resume fails, reload OnionHEN from the payload manager

Notes

Cheats: /data/OnionHEN/cheats (no subfolders)
Payloads: /data/OnionHEN/payloads
Bundled kstuff is kstuff-lite 1.10. Create /data/OnionHEN/no_kstuff to skip it (your own kstuff must already be running), or put a replacement at /data/OnionHEN/kstuff.elf.

Credits

Thanks to the etaHEN team. OnionHEN is built on their work.

onionHEN changelog

v0.9.0 · Oct 15, 2026

OnionHEN v0.9.0

What changed since v0.0.13

Firmware compatibility

Cheats

elfldr

Also

Quick start

Changelog

Plugins

kstuff

Important

Hotkey conflicts

Testing and logs

File locations

FAQ

Where did the built-in FTP server go?

Can I run this next to etaHEN?

Support

Credits

Contributors

Testers

Donors

Referenced

v0.0.13 · Sep 11, 2026

OnionHEN v0.0.13

Breaking changes

elfldr v0.22+ required for this release

Built-in FTP server removed

Quick start

What's new

External ELF plugins

Game overlay: fan duty, order, and text size

Payload priority and auto-start delay

Refuse start when another HEN is already running

Rest Mode Toolbox delay

Other improvements

Changelog

Plugins

Cheats

Supported formats

Installation

Download

Game overlay

Payloads

Fan control

App jailbreak

kstuff

Not included compared with etaHEN

Important

Hotkey conflicts

File locations

FAQ

Where did the built-in FTP server go?

My cheats don't load.

Can I use etaHEN plugins with OnionHEN?

Can I load .prx / .sprx plugins like GoldHEN?

Can I run OnionHEN alongside etaHEN or other hotkey tools?

The Toolbox glitches after Rest Mode.

Support

Credits

Contributors

Referenced

v0.0.12 · Aug 31, 2026

OnionHEN v0.0.12

Quick start

What's new

Multiple cheat files work together

Cheat catalog keeps original file names

Monitor bar alignment

Changelog

Cheats

Supported formats

Installation

Download

Overlay

Payloads

Fan control

App jailbreak

Can I load `.prx` / `.sprx` plugins like GoldHEN?

Can I load `.prx` / `.sprx` plugins like GoldHEN?

Can I load `.prx` / `.sprx` plugins like GoldHEN?