Main Menu

Glitches

References/Resources

Affiliates

Technical

Search Wiki

Toolbox

Remote code execution
 Page | Discussion | View source | History

From Glitch City Laboratories

Jump to: navigation, search
Arbitrary code execution in the Pokémon series

0x1500 control code arbitrary code execution (Crystal) | Cart-swap arbitrary code execution | Connection Copier (arbitrary RAM writer) | Generation I custom map script pointer | Generation I invalid meta-map scripts | Generation I item ("8F", "ws m", "-g m", "5かい", "てへ" etc.) | Generation I move ("-", "TM42") | Generation I Trainer escape glitch text boxes | Generation II bad clone | Generation II Burned Tower Silver | Japanese Crystal Pokémon Communication Center SRAM glitches | Coin Case glitch | Generation II glitch Pokédex sortings | Pikachu off-screen glitch ACE | OAM DMA hijacking | Pikachu glitch emote | Generation III glitch Pokémon summary | Generation III glitch move animation) | Remote code execution | TM/HMs outside of the TM/HM pocket | ZZAZZ glitch Trainer FC (view, talk, edit)
Major glitches of the Pokémon series
"Core" glitch Variants and Consequences
Arbitrary code execution see template, remote, cart-swap, unintended ROM code execution
2x2 block encounter glitches Left-facing shore tile glitch (in-game trade shore encounter trick, old man trick, Trade link up shore encounter trick, Fight Safari Zone Pokémon trick)
99 item stack glitch ­
Bad clone glitch ????? party overloading (Type 0xD0 move glitch, ????? map corruption, Celebi trick, Celebi Egg trick, Shiny Celebi trick, glitch move map corruption, overloaded party map corruption, Glitch Unown (Glitch Unown map corruption) Duplicate key items glitch (infinite items and item creation, expanded Balls pocket (TM/HMs outside of the TM/HM pocket, Glitch Pokédex categories))
Berry glitch
Bug-Catching Contest data copy glitch (Japan only)
Cloning
Ditto DV manipulation
Elite Four door glitch (Japan only)
Expanded party encounter table manipulation
Glitch City Safari Zone exit glitch, RAM manipulation
Glitch meta-map script activation (Generation I)
Infinite Master Balls (Colosseum)
Large storage box byte shift glitch storage box remaining HP glitch, maximum stat glitch
Item duplication glitch
Item stack duplication glitch Generation I expanded items pack (Glitch Rocket HQ maps, Map FE (English and non-English European Yellow), Map script pointer manipulation (arbitrary code execution, map script pointer item ball manipulation), Text pointer manipulation (arbitrary code execution, item ball manipulation, mart buffer overflow), Trainerless instant encounter glitch
Transform held item glitch (Japan only)
Mimic glitch (Japan only)
Out of bounds Glitch City (Generation II) Slowpoke Well out of bounds corruption (French version)
Lumiose City save glitch
Pikachu off-screen glitch Trainer corruption glitch
Pokémon merge glitch
Pomeg glitch Pomeg data corruption glitch
Roaming Pokémon encounter glitch
(Mimic) Transform Rage glitch
Select glitches (Japan only) Closed menu: Dokokashira door glitch (international), Fossil conversion glitch (international), Second type glitch, Skip to Level 100 glitch, Trainer mutation glitch, walk through walls (international) Special menu: Lift glitch, Badge describer glitch)
Sketch glitch
SRAM glitch (Generation I) 255 Pokémon glitch, send party Pokémon to a new game
SRAM glitches (Generation II) Mailbox glitches, Mystery Gift item corruption, Trainer House glitches
Surf down glitch Grass/rock Surfing glitch (Spanish/Italian only) (adaptions: Submerge glitch (international), 8 8 (0x7C) grass/rock surfing glitch (English Red/Blue))
Time Capsule exploit
Tweaking
Trainer escape glitch Death-warp, Mew Trick, Ditto Trick, Experience underflow glitch
Buffer overflow techniques Japanese unterminated name glitch item instant encounter glitch, LOL glitch, Rival LOL glitch, Instant LOL glitch, RAM LOL glitch, oobLG, blockoobLG, Instant encounter infinite chain glitch (LGFly)), Super Glitch (Generation I) (party remaining HP glitch), Super Glitch (Generation III), Text pointer manipulation mart buffer overflow glitch, CoolTrainer♀-type move, Double distort CoolTrainer♀ corruption, Yami Shop glitch
Walk through walls ledge method, museum guy method, Rival's effect, Select glitch method (international), Brock Through Walls
ZZAZZ glitch party Pokémon box data shift glitch



(view, talk, edit)
This article is a summary page for different variations of a glitches, etc. when talked about as a whole.
Collective.png

Remote code execution is a form of arbitrary code execution between two or more games or a game and a device.

This technique has been used in the Pokémon games for Generation I, Generation II and Generation III. The exploit also resulted in what was called the 'first Pokémon Red and Blue virus', which would send a save file to another game (from a game that connects to another game via Link Cable) and trap the other player in a Glitch City.

In Generation I

Remote code execution can be performed with a corrupted party through the Link Cable. This method was documented on the website vaguilar in 2015 and shared on the Glitch City Laboratories Forums by Aldrasio in 2016.

YouTube video by MrCheeze

Another way to do it is via arbitrary code execution with the effect of CoolTrainer♀-type move. Using this technique, Crystal_ created a two-player Pong game.

YouTube video by Crystal_

In Generation II

Remote code execution can be performed with a corrupted party using the Link Cable, similar to Generation I. A proof of concept was demonstrated in a YouTube video by TheZZAZZGlitch in 2014. According to the video description, this appears to be the same issue as in Generation I.

YouTube video by TheZZAZZGlitch

In Generation III

Remote code execution on a Generation III core series game can be performed with a hacked Wii to transfer data via the Nintendo GameCube – Game Boy Advance link cable. This exploit was found by Wack0. Because the Game Boy Advance hardware does not support being player 1 in this style of linking, this method of remote code execution is not wormable (it can't be used to create a "save file virus").

This article or section is a stub. You can help Glitch City Laboratories wiki by expanding it. RB 234 fs crop.png