Re: Arbitrary code execution in Gold/Silver UE using the Coin Case
Posted by: CasualPokePlayer
Date: 2020-03-09 21:51:44
How many ACE mode has Pokémon Gold and Silver?
Umm, for Gold/Silver we have the following ACE methods;
1. Coin Case
2. Wrong pocket TMs
3. Move 0x00's type 0xD0 arbitrary code execution
ACE within ACE: FF80 ACE
Crystal has a few more:
1. 0x15 control character ACE
2. Burned Tower Silver wrong side glitches
Edit: Ah, also remote code execution :) https://www.youtube.com/watch?v=e8CO_e_rKd8 and https://www.youtube.com/watch?v=exbS3yO45k0
Edit 2:
Stack smash ACE
Glitch Pokédex mode ACE
CartSwap ACE
https://forums.glitchcity.info/index.php?topic=8126.msg207521#msg207521
Hope this helps :)
Also wrong pocket TM ACE, also depositing the terminator into a box (possible with temp view corruption from friendly clones).