Arbitrary code execution
0x1500 control code arbitrary code execution (Crystal) | Cart-swap arbitrary code execution | Generation I custom map script pointer | Generation I invalid meta-map scripts | Generation I item ("8F", "ws m", "-g m", "5かい", "てへ" etc.) | Generation I move ("-", "TM42") | Generation I Trainer escape glitch text boxes | Generation II bad clone | Generation II Burned Tower Silver | Japanese Crystal Pokémon Communication Center SRAM glitches | Coin Case glitch | Generation II glitch Pokédex sortings | Pikachu off-screen glitch ACE | OAM DMA hijacking | Pikachu glitch emote | Generation III glitch Pokémon summary | Generation III glitch move animation) | Remote code execution | TM/HMs outside of the TM/HM pocket | ZZAZZ glitch Trainer FC
[hr] No further extensions
Cloning | Item duplication glitch (Generation I) | Pokémon merge glitch ("Q Glitch", Generation I) | Time Capsule exploit | Bug-Catching Contest data copy glitch (Generation II, Japan only) | Berry glitch | Battle Tower Lati@s glitch (Generation III) | (Mimic) Transform Rage glitch (Generation IV)
Transform held item glitch (Generation IV, Japan only) | Mimic glitch (Generation IV, Japan only)
[hr] Buffer overflow techniques
99 item stack glitch | LOL glitch | Rival LOL glitch | Instant LOL glitch | RAM LOL glitch | Out of bounds LOL glitch | blockoobLG | Instant encounter infinite chain glitch | LGFly | Super Glitch (Generation I) | Party remaining HP glitch | Super Glitch (Generation III) | Text pointer manipulation mart buffer overflow glitch | CoolTrainer♀-type move | Double distort CoolTrainer♀ corruption | Yami Shop glitch | Party Pokémon box data shift glitch | Unterminated name glitch item instant encounter (Japanese Red/Green)
[hr] Item stack duplication glitch (Generation I)
Generation I expanded items pack (Glitch Rocket HQ maps, Map FE (English and non-English European Yellow) | Map script pointer manipulation (arbitrary code execution | Map script pointer item ball manipulation) | Text pointer manipulation (arbitrary code execution | Item ball manipulation | Mart buffer overflow) | Trainerless instant encounter glitch
[hr] Bad clone glitch (Generation II)
????? party overloading (Type 0xD0 move glitch | ????? map corruption | Celebi trick | Celebi Egg trick | Shiny Celebi trick | Glitch move map corruption | Overloaded party map corruption | Glitch Unown (Glitch Unown map corruption) | Duplicate key items glitch (Infinite items and item creation, Expanded Balls pocket (Wrong pocket TM/HMs, Glitch Pokédex categories))
[hr] Closed menu Select glitches (Japanese Red/Green)
Dokokashira door glitch (International) | Fossil conversion glitch (international) | Second type glitch | Skip to Level 100 glitch | Trainer mutation glitch | Walk through walls (International) | Lift glitch | Badge describer glitch
[hr] Pomeg glitch (Generation III)
Pomeg data corruption glitch ("Glitzer Popping") | Charm glitch
[hr] Voiding (Generation IV)
Broken escalator glitch (Japan only) | Elite Four door glitch (Japan only)
[hr] 2x2 block encounter glitches (Generation I)
Left-facing shore tile glitch (in-game trade shore encounter trick, Old man trick, Trade link up shore encounter trick, Fight Safari Zone Pokémon trick) | Viridian Forest no encounter grass tiles glitch
[hr] Glitch City
Safari Zone exit glitch | RAM manipulation | Out of bounds Glitch City (Generation II) | Slowpoke Well out of bounds corruption (French Gold/Silver/Crystal)
[hr] Large storage box byte shift glitch
Storage box remaining HP glitch | Generation I max stat trick
[hr] Pikachu off-screen glitch
Trainer corruption glitch
[hr] SRAM glitches
Generation I save corruption | 255 Pokémon glitch | Expanded party encounter table manipulation (Generation I) | Send party Pokémon to a new game (Generation I) | Generation II save corruption | Mailbox glitches | Mystery Gift item corruption | Trainer House glitches
[hr] Trainer escape glitch
Death-warp | Ditto trick | Experience underflow glitch | Mew trick | Text box ID matching | Meta-map script activation
[hr] Walk through walls
Ledge method | Museum guy method | Rival's effect | Select glitch method (International Select glitch method), Brock Through Walls
[hr] Surf down glitch
Grass/rock Surfing glitch (Spanish/Italian only) (adaptions: Submerge glitch (international)) | 8 8 (0x7C) grass/rock surfing glitch (English Red/Blue))
(view, talk, edit)
|PRAMA Initiative a également une page sur .|
Using an 'unterminated name item', a 'tile printing item' that prints the Rival's name and a 'screen data saving item' one can capture a Pokémon based on the ID of a character in the Rival's name.
Via the expanded items pack, the Rival's name can be manipulated by adjusting an item quantity, allowing the player to continuously catch Pokémon.
Despite being a relatively complex glitch, it is rather useful for obtaining the bootstrap Pokémon for glitch item "ws m" (hex:63) in Yellow after obtaining the expanded items pack and obtaining glitch Pokémon where there aren't many methods to obtain them.
Requirements for Red/Blue
1) Hex:9E item: Super Glitch item, "tile writer"
2) 9F (hex:5E): "screen data saver", "battle escape item"
3) Pokémon with "-" as the first move; which can be obtained by using Ditto, encountering a Pokémon, transforming into it, swapping the 2nd-4th move with the first move and escaping.
4) A six letter long rival name.
Requirements and changed steps for Yellow
1) Hex:80 glitch item (both a Super Glitch item and tile writer item).
2) -gm (hex:6A) (both a battle escape item and screen data saver).
3) 9F (hex:5E) - Does not work like Red/Blue's 9F. This is used to refresh the graphics after 'partially' (so that D057/D056 still equals 01) escaping from a battle with -gm.
4) A six letter long rival name.
Steps1) Perform the LOL glitch, escaping from a Pokémon with -gm (or 9F if using Red/Blue) and then if using Yellow, 9F near Fuchsia City first. Some Pokémon might not work for the glitch later, so it is a good idea to ensure the Pokémon is Doduo which does work.
2) Don't fly away after escaping from the Doduo or you'll make D057/D056 00 (meaning you can't catch your Pokémon at the end of the glitch). Go to a special spot (below) with hex:80 at the top of the page and -gm below it on the same page. Make sure there is a bottom-left tile of a bush tile on the screen, if not open the Pokémon menu and close it.
3) Make the cursor point to hex:80 (but don't press A on it), use -gm (Yellow) or 9F (Red/Blue) to save the screen dump, and then press A on hex:80 (Yellow) or hex:9E (Red/Blue) but cancel out.
4) Throw a Master Ball (you can do it even though you appear out of battle), and you'll get the Pokémon or glitch Pokémon depending on the fourth letter of the Rival name provided it's a working one (not a control character like 50h).
Notes1) If you want to do the glitch again, save and reset after obtaining your Pokémon. Trying to do another Rival CoolTrainer (or probably LOL glitch) in one session will give you bad tiles that obstruct the 50s (bottom left bush tiles).
2) When you enter Diglett's Cave and catch the Pokémon, remember to open the menu and close it before leaving the cave. This is to avoid a possible freeze.
3) Sometimes the bottom left bush tiles disappear, but opening the Pokémon menu and closing it makes them appear again.
4) For the CoolTrainer method, Ditto may be given a status problem after the foe's species mutates, so remember to heal it at a Pokémon Center or with a Full Heal before doing the glitch again.
What this glitch doesThis glitch writes a tile from the fourth letter of your Rival's name (must be 6 letters long for this demonstration) into coordinate y=01, x=06 (the position for "-" move corruption that determines the foe's species) thanks to the hex:9E item (a 'tile writer' item) when it is in the first position, and a certain place (http://i.imgur.com/s5AZIod.png) in Fuchsia City with a roof tile (hex: 53; a control character which prints the Rival's name) and a suitable position for a 50h (prevents freezes for CoolTrainer and LOL glitch).
For the LOL glitch version, we first escape from battle using a partial escape glitch item (9F in Red/Blue or -gm in Yellow).
We then go to the special spot in Fuchsia City (above) and use 9F (Red/Blue) or -gm (Yellow) (should be on the same page as hex:9E) to make the game 'save' the screen data.
Lastly we use an unterminated name glitch item to perform a version of LOL glitch with the Pokémon based on what appeared at y=01 x=06 before using 9F.
If using CoolTrainer, we perform the same steps but without escaping from battle, Fly to Diglett's Cave, don't open any more menus, and corrupt the enemy Pokémon to turn it into the species depending on the index number of the fourth letter.
Even though the results 'should' be limited to characters you can choose on the new name screen, there is a way to get the fourth letter to be any character, described below. Note that you can't get everything; as certain values don't show up on the screen as tiles, namely $50, $51, $56, $57 and more, yet we can still get rare Pokémon like Mew, Ditto glitch Pokémon, Time Capsule exploit glitch Pokémon and FB-FE!
If you have an expanded items pack via the dry underflow glitch, then you can change the 4th letter of your Rival's name to what you like by tossing from an item quantity past slot 20 (item 24's quantity). The quantity may be too low at first, so when you get to the spot you can swap the x position block (item 35's quantity, usually 01 or 00) value into it when it is 00 (256) and then toss from it. You can also change the length of the Rival name to 6 by adding a 50h in slot 7 if it isn't already and removing 50h earlier than slot 7. These will be nearby item 24 and either look like an Ether or quantity of 80.
Note: If you use a tile writer item other than hex:9E the game will likely write the wrong character/tile in x=01, y=06.