Re: Emulating the Mobile Adapter GB
Posted by: Stackout
Date: 2017-08-16 17:26:07
Game Freak's parser bugs don't surprise me. An RCE vector here would allow for some interesting custom servers; however RCE via trades exists too, which would be the more dangerous, in my opinion, as any player could trigger it. I guess a custom server would have to somehow detect it (given this RCE vuln would be in the P2P communication with "phone numbers" etc).
And now I'm thinking about a server with its own partial GB emulator, MITMing the connection if it detects an RCE via trading, and specifically implementing GB Mobile Adapter emulation itself so the payload can get any further data… Saved off for further reversing/analysis of course.