Arbitrary code execution
0x1500 control code arbitrary code execution (Crystal) | Cart-swap arbitrary code execution | Generation I custom map script pointer | Generation I invalid meta-map scripts | Generation I item ("8F", "ws m", "-g m", "5かい", "てへ" etc.) | Generation I move ("-", "TM42") | Generation I Trainer escape glitch text boxes | Generation II bad clone | Generation II Burned Tower Silver | Japanese Crystal Pokémon Communication Center SRAM glitches | Coin Case glitch | Generation II glitch Pokédex sortings | Pikachu off-screen glitch ACE | OAM DMA hijacking | Pikachu glitch emote | Generation III glitch Pokémon summary | Generation III glitch move animation) | Remote code execution | TM/HMs outside of the TM/HM pocket | ZZAZZ glitch Trainer FC
[hr] No further extensions
Cloning | Item duplication glitch (Generation I) | Pokémon merge glitch ("Q Glitch", Generation I) | Time Capsule exploit | Bug-Catching Contest data copy glitch (Generation II, Japan only) | Berry glitch | Battle Tower Lati@s glitch (Generation III) | (Mimic) Transform Rage glitch (Generation IV)
Transform held item glitch (Generation IV, Japan only) | Mimic glitch (Generation IV, Japan only)
[hr] Buffer overflow techniques
99 item stack glitch | LOL glitch | Rival LOL glitch | Instant LOL glitch | RAM LOL glitch | Out of bounds LOL glitch | blockoobLG | Instant encounter infinite chain glitch | LGFly | Super Glitch (Generation I) | Party remaining HP glitch | Super Glitch (Generation III) | Text pointer manipulation mart buffer overflow glitch | CoolTrainer♀-type move | Double distort CoolTrainer♀ corruption | Yami Shop glitch | Party Pokémon box data shift glitch | Unterminated name glitch item instant encounter (Japanese Red/Green)
[hr] Item stack duplication glitch (Generation I)
Generation I expanded items pack (Glitch Rocket HQ maps, Map FE (English and non-English European Yellow) | Map script pointer manipulation (arbitrary code execution | Map script pointer item ball manipulation) | Text pointer manipulation (arbitrary code execution | Item ball manipulation | Mart buffer overflow) | Trainerless instant encounter glitch
[hr] Bad clone glitch (Generation II)
????? party overloading (Type 0xD0 move glitch | ????? map corruption | Celebi trick | Celebi Egg trick | Shiny Celebi trick | Glitch move map corruption | Overloaded party map corruption | Glitch Unown (Glitch Unown map corruption) | Duplicate key items glitch (Infinite items and item creation, Expanded Balls pocket (Wrong pocket TM/HMs, Glitch Pokédex categories))
[hr] Closed menu Select glitches (Japanese Red/Green)
Dokokashira door glitch (International) | Fossil conversion glitch (international) | Second type glitch | Skip to Level 100 glitch | Trainer mutation glitch | Walk through walls (International) | Lift glitch | Badge describer glitch
[hr] Pomeg glitch (Generation III)
Pomeg data corruption glitch ("Glitzer Popping") | Charm glitch
[hr] Voiding (Generation IV)
Broken escalator glitch (Japan only) | Elite Four door glitch (Japan only)
[hr] 2x2 block encounter glitches (Generation I)
Left-facing shore tile glitch (in-game trade shore encounter trick, Old man trick, Trade link up shore encounter trick, Fight Safari Zone Pokémon trick) | Viridian Forest no encounter grass tiles glitch
[hr] Glitch City
Safari Zone exit glitch | RAM manipulation | Out of bounds Glitch City (Generation II) | Slowpoke Well out of bounds corruption (French Gold/Silver/Crystal)
[hr] Large storage box byte shift glitch
Storage box remaining HP glitch | Generation I max stat trick
[hr] Pikachu off-screen glitch
Trainer corruption glitch
[hr] SRAM glitches
Generation I save corruption | 255 Pokémon glitch | Expanded party encounter table manipulation (Generation I) | Send party Pokémon to a new game (Generation I) | Generation II save corruption | Mailbox glitches | Mystery Gift item corruption | Trainer House glitches
[hr] Trainer escape glitch
Death-warp | Ditto trick | Experience underflow glitch | Mew trick | Text box ID matching | Meta-map script activation
[hr] Walk through walls
Ledge method | Museum guy method | Rival's effect | Select glitch method (International Select glitch method), Brock Through Walls
[hr] Surf down glitch
Grass/rock Surfing glitch (Spanish/Italian only) (adaptions: Submerge glitch (international)) | 8 8 (0x7C) grass/rock surfing glitch (English Red/Blue))
(view, talk, edit)
LGFly is a glitch technique in Pokémon Red and Blue. This glitch may not be possible in REDIRECT Template:Yellow without arbitrary code execution, due to the lack of an item functioning like 8 8 (hex:7C).
LGFly was originally introduced as a technique for 151 catch 'em all speedruns.
It is a combination of instant encounter infinite chain glitch, RAM LOL glitch and Rival LOL glitch and like Rival LOL glitch allows the player to obtain many glitch Pokémon except for those with IDs corresponding to control characters.
The glitch is one of the oldest mass farming glitches for Pokémon Red, Blue, and Yellow before glitches known as oobLG, blockoobLG and text pointer manipulation mart buffer overflow glitch (or "martPWNer") were discovered and much later, banned.
Performing the glitch
Before you use this glitch, you should have a Rival name that is at least six characters long, and the second and fourth characters of your Rival's name must be hex:5E or ROCKET control character. This is to offset the location of another part of your Rival's name to the portion of the screen x=01 y=06 that affects the ID of the enemy Pokémon in battle during semi-Super Glitch techniques.
To get "ROCKET" or hex:5E in the Rival's name, you should modify item 23 and item 24's quantity in the expanded items pack to 94 because 94 is hex:5E in decimal.
What LGFly is is a combination of multiple glitches including: Trainer-Fly on Route 6, the glitch item "8 8" (hex:7C) which immediately starts a battle, and Rival LG (with tile-writing glitch item 4 8 4 8 (hex:9E) and 9F (hex:5E)) that allows you to capture any Pokémon outside of battle in an applicable Glitch City. You must also use a Rival's/Jack effect item such as RIVAL's hex:A2 to move on to a post.
StepsFirst off, set-up a Trainer-Fly on Route 6. You can do this by escaping from a Trainer on Route 6, having an NPC finish walking up to you, changing boxes, resetting and then loading a Pokémon in to memory, but to do this without any Trainers you can edit the quantity of item 99 in the storage box to 1.
PC item 99's quantity controls the current script on Route 6 and is normally 0 or 256. Tossing 255 of the item allows us to change the script to have an ID of 1, which essentially sets up a Trainer-Fly on Route 6.
It is possible to set up the expanded PC items with dry underflow glitch.
The dry underflow glitch combined with the Celadon looping map trick allows us to get the glitch items "4 8 4 8" (hex:9E), "8 8" (hex:7C), 9F (hex:5E) and a Rival's item (such as Rival's hex:A2)
After setting up the Trainer-Fly, go to Saffron City and head to the south exit. There should be four posts north of the gate to Route 6. What you should do is stand three steps north of the building facing the right. Next you should use the Rival's effect item then move one step west and then one step south in that order. The Start menu should pop up.
Next, you should go to item 33 in the items pack and toss 16, then press Select on the HM03 and swap it with a Town Map. What this does is change the source of the map block data (i.e. D35F) from C6FD to 05ED but basically we end up with a Glitch City applicable for Rival LG with our current Rival name.
Now that you have LGFly set up, you can use it to catch almost any Pokémon in the game! The only Pokémon you can't catch are those that have IDs corresponding to control characters because the control characters would print a different character on to y=01 x=06.
The glitch may look a little intimidating at first because you need to follow some precise steps to catch the Pokémon you want and not freeze the game, but if you follow it step by step you can get used to it better.
Please note that due to 9F stack corruption, the glitch shouldn't be used more than about 7 or 8 times in a row per session, otherwise you risk freezing your game and corrupting your box data.
The steps once the Glitch City and Route 6 encounter are ready:
1) Use 8 8 to begin a battle.
2) Use 9F.
3) Flash the Trainer Card.
4) Modify rival name character 6 (item 25's quantity) to the Pokémon ID you want.
5) Use 9F again.
6) Press A on 4 8 4 8 but back out and don't use it.
7) Throw a Master Ball.
8) Use 8 8 again to begin another battle.
10) Repeat the previous steps from the start.
For battles that immediately follow captures, the foe will have glitched HP and catching it will give you a Ditto. In LGFly it's a good idea to run away from these battles.
Say you want a Mewtwo. If the quantity for rival name 6 is 253 Mewtwo's decimal ID is 131 so if we want Mewtwo we have to toss 122 from 253 to get the 131 value (or "D").
Pokémon with the glitched HP should turn into Ditto when captured instead of the original Pokémon.