Hijacking the PS5's RTMP stream
A developer bypassed PS5 streaming restrictions by using local DNS spoofing to redirect the console's RTMP stream to a local machine running Nginx.
read it A clever technical walkthrough that provides a practical, low-cost workaround for streaming PS5 gameplay to Discord without a capture card.
summary
Sony locks down PS5 broadcasting, forcing users to buy expensive capture cards or rely on limited Remote Play to stream to platforms like Discord. The author discovered that Twitch's ingest servers accept unencrypted RTMP streams without strict certificate validation on the console side. By configuring a local router and Mac with dnsmasq to intercept DNS queries for Twitch ingest domains, the PS5's stream is silently redirected to a local nginx-rtmp server. This allows users to capture, record, or restream console gameplay locally using tools like mpv with minimal latency.
key points
- The PS5 resolves Twitch ingest domains via DNS and pushes an unencrypted RTMP stream over port 1935, avoiding the need for custom client-side SSL certificates.
- Using a local dnsmasq instance and OpenWRT router DHCP options, Twitch ingest traffic is intercepted and pointed at a local machine's IP address.
- An nginx-rtmp server receives the broadcast stream, allowing tools like mpv to pull it with low latency for direct screen-sharing on Discord.
who should read it
Software engineers and tech-savvy gamers looking to bypass hardware restrictions for streaming.
discussion positive
consensus
Commenters find the hack clever and appreciate the workaround, while expressing mild disbelief that major streaming protocols and modern consoles still transmit video streams unencrypted over plain RTMP.
pushback
Some commenters argue that setting up a local DNS interceptor is overkill compared to buying a cheap HDMI capture card or using a PC.
PS5 uses DNS to resolve where to send RTMP stream. The author found out that they cannot spoof the main server since that server uses TLS and it's not possible to make the PS5 trust self made certificate. The author then runs a real Twitch stream and monitors DNS requests and finds DNS of the server that receives the RTMP stream and spoofs only that final server. It's more of a problem with RTMP protocol/Twitch security rather than the PS5.
Clarifies that the exploit relies on Twitch's endpoint fallback mechanics rather than a vulnerability in the PS5 itself.
Generated by an LLM from the article and thread. Check the sources before relying on it.