PoC exploit for Super Smash Brothers Wii U to execute arbitrary ROP in userland
Go to file
2019-01-18 12:20:35 -05:00
kexploit Reorganize file layout 2019-01-18 12:20:35 -05:00
poc Reorganize file layout 2019-01-18 12:20:35 -05:00
LICENSE Initial commit 2017-07-31 16:35:07 -04:00
README.md Update README.md 2018-04-08 15:40:58 -04:00
ROP-NOTES.txt Initial commit 2017-07-31 16:35:28 -04:00
WRITE-UP.md Fix spelling/grammer 2017-08-06 13:23:17 -04:00

ROBChain

PoC exploit for Super Smash Brothers Wii U to get arbitrary ROP execution under userland

Can go over any fighter (and possibly article) to gain arbitrary code execution (Only ROP atm). This is a variation of contenthax based around MSC (the main character scripting language) exploiting a heap overflow to gain arbitrary read/write within the MSC script. Use pymsc to build.

Video

https://youtu.be/u3qKsbGPgn0

Write up

https://github.com/jam1garner/ROBChain/blob/master/WRITE-UP.md