games

Extracting PICO-8 code hidden in a cartridge PNG's color-channel LSBs, then reimplementing its Lua check in Python to recover the password.Extracting PICO-8 code hidden in a cartridge PNG's color-channel LSBs, then reimplementing its Lua check in…

Abusing an snprintf return-value bug to wrap a write into the GOT and point memset at system, using the game's leaked luck stat as a libc address.Abusing an snprintf return-value bug to wrap a write into the GOT and point memset at…

Decoding a Game Boy link-cable capture as SPI in Saleae Logic, then converting the bytes with a Pokémon character table to read the flag.Decoding a Game Boy link-cable capture as SPI in Saleae Logic, then converting the bytes with…

Extracting the GameMaker data.win from the game executable and opening it in UndertaleModTool to read the flag from its winner room.Extracting the GameMaker data.win from the game executable and opening it in UndertaleModTool to read the…