From 67f5398d00971480b262daef9bd6c914f03825f4 Mon Sep 17 00:00:00 2001 From: jam1garner Date: Fri, 18 Jan 2019 17:05:13 -0500 Subject: [PATCH] Update README with build instructions --- README.md | 25 ++++++++++++++++++++++++- 1 file changed, 24 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index b57dd7f..1cf41e4 100644 --- a/README.md +++ b/README.md @@ -3,7 +3,30 @@ PoC exploit for Super Smash Brothers Wii U to get arbitrary ROP execution under Can go over any fighter (and possibly article) to gain arbitrary code execution (Only ROP atm). This is a variation of contenthax based around MSC (the main character scripting language) exploiting a heap overflow to gain arbitrary read/write within the MSC script. Use [pymsc](https://github.com/jam1garner/pymsc) to build. -### Video +### Build PoC + +Required: + +* Python 3.6 or greater in path as python3 (Edit Makefile for other configs) +* make + +``` +git clone --recurse-submodules https://github.com/jam1garner/ROBChain.git && \ +cd ROBChain/poc && \ +make clean && make +``` + +### Install + +Take the generated exploit.mscsb and install it in a patch over + +``` +/data/fighter/[fighter]/script/msc/[fighter].mscsb +``` + +then install via SDCafiine or fs contents replacement. + +### Video of PoC https://youtu.be/u3qKsbGPgn0