Parallel Launcher 2.14.3 Emulator Escape PoC

This is some old proof-of-concept code for exploiting an OOB .data array read/write primitive in Parallel Launcher's mupen64plus fork using SRAM DMA.

It's able to recover from exploitation and install a hook to run arbitrary native code using an undefined opcode in the guest.

lolrce.mp4

Name		Name	Last commit message	Last commit date
Latest commit History 1,130 Commits
.vscode		.vscode
actors		actors
asm		asm
assets		assets
bin		bin
data		data
doxygen		doxygen
enhancements		enhancements
include		include
levels		levels
lib		lib
rsp		rsp
sound		sound
src		src
text		text
textures		textures
tools		tools
.clang-format		.clang-format
.clang-tidy		.clang-tidy
.gitattributes		.gitattributes
.gitignore		.gitignore
.gitmodules		.gitmodules
CHANGES		CHANGES
CODEOWNERS		CODEOWNERS
Dockerfile		Dockerfile
Doxyfile		Doxyfile
Jenkinsfile		Jenkinsfile
Makefile		Makefile
Makefile.split		Makefile.split
README.md		README.md
VERSION.txt		VERSION.txt
assets.json		assets.json
charmap.txt		charmap.txt
charmap_menu.txt		charmap_menu.txt
diff.py		diff.py
diff_settings.py		diff_settings.py
extract_assets.py		extract_assets.py
first-diff.py		first-diff.py
format.sh		format.sh
gziprules.mk		gziprules.mk
haveyourcake2.patch		haveyourcake2.patch
mio0rules.mk		mio0rules.mk
rename_sym.sh		rename_sym.sh
rnc1rules.mk		rnc1rules.mk
rnc2rules.mk		rnc2rules.mk
rspdata.inc.ld		rspdata.inc.ld
rsptext.inc.ld		rsptext.inc.ld
sm64.eu.sha1		sm64.eu.sha1
sm64.jp.sha1		sm64.jp.sha1
sm64.ld		sm64.ld
sm64.sh.sha1		sm64.sh.sha1
sm64.us.sha1		sm64.us.sha1
uncomprules.mk		uncomprules.mk
undefined_syms.txt		undefined_syms.txt
util.mk		util.mk
yay0rules.mk		yay0rules.mk

Provide feedback