u/0xdeain r/ReverseEngineering • Recommends
Arbitrary Code Execution Proof of Concept in Paper Mario
0:00 / 0:00
#arbitrarycodeexecution#papermario#n64
(Proof of Concept) ACE in Paper Mario
Fray
462 subscribers • 1 video on Hallway
- Recommended by 1 person: 1 in engineering communities.
Advanced. Deep dive for people who know the field.
6.5K views5 years ago1 recommendation
SecurityGame developmentExploits and vulnerabilitiesGame programming
A demonstration of how to achieve arbitrary code execution in Paper Mario by manipulating memory values and matrix coordinates.
UPDATE: As of 02/20/2021 this setup went from theory to reality. More information about that in this twitter thread: twitter.com/MrCheeze_/status/1363199136963649543 Positions we needed to reach in order to make this setup work: C41EFA6D 412FFCF8 C30D50FD (-635.912903, 10.999260, -141.31636) C417FA1C 40DFF9EC C31058FA (-607.907959, 6.999258, -144.347565) C41DFA31 411FF6FE C3055CE6 (-631.909241, 9.997801, -133.362885) C41C7A04 412002FF C309C8E1 (-625.906494, 10.000731 -137.784683) C41C7A24 412002FF C309CB64 (-625.908447, 10.000731, -137.794495) C432D701 400000D6 C2CBEFF1 (-715.359436, 2.000053, -101.968636) Also, at I did NOT create footstep particles.. I really don't know why it crashed there. Chapters: Introduction Important Memory Values Manipulation of Effects and Matrices Executing Matrix Coordinates as Instructions Redirecting Execution to Player Inputs Closed Loop With File Names Explanation of Example Payload Playback of Example TAS Video Closing Thoughts