[TAS] Pokémon Yellow - Arbitrary Code Execution

MrWint4 HN recommenders · 2020–2025
598K views · demo · evergreen · Uploaded 2017-02-05

A tool-assisted speedrun of Pokemon Yellow by MrWint that uses arbitrary code execution to push Game Boy hardware to its limits. Through crafted inputs it injects code and ends up running other programs, such as Tetris, inside the game.

HN points to it as the standard demonstration of arbitrary code execution on a Game Boy, and of glitches and bugs being turned into a working computer.

Watch on YouTube

6 comments from Hacker News

@DougBTX2020 · in “Show HN: A SQL database implemented purely in TypeScript type annotations”

At the end of the day, if you look at a low enough level in the stack, there are no types. In a very concrete way, types are a high-level idea, and if the high-level stops matching the low-level, then bugs crop up. See for example Tetris implemented in Pokémon Yellow via runtime code injection: [VIDEO] Their compiler missed that! So I think there's good reason to switch from talking about types as "assumptions", and think of them as compile time "assertions". Something lower-level in the stack could break the high-level code, but that doesn't make the high-level code useless, just imperfect.

@alexb_2022 · in “Accidentally Turing-Complete”

It mentions Pokemon Yellow, but really any code run isn't really "run in the game" more so that it uses bugs to hack together alternate instructions for the game boy to execute. Good example: [VIDEO] (skip to 1:20 for craziness)

RecommendsView on HN
@schroeding2022 · in “Games Done Quick “Ocarina of Time” beta showcase”

Arbitrary Code Execution TAS like Triforce% or this Pokemon Yellow one[1] are more or less demos that target both the console and the "host game". I would say even some non-ACE ones like this Brainage TAS[2] are demos :D [1] [VIDEO] [2] [LINK]

@stepupmakeup2022 · in “Tetsuji: Remote Code Execution on a GameBoy Colour 22 Years Later”

One of the crazier uses of ACE in Gameboy Pokemon games exploits is this "speedrun", by MrWint: [VIDEO] ([TAS] Pokémon Yellow - Arbitrary Code Execution) I've timestamped the part where the actual exploit begins, after all of thesetup. It's worth mentioning that this isn't faked or edited in any way, and it's possible to download the input data and replicate on a emulator yourself.

Strongly recommendsView on HN
@Dwedit2024 · in “Hackers discover how to reprogram NES Tetris from within the game”

Sometimes even after you've come up with the exploit, you can create something really beautiful for the console to run afterwards. Pokemon Yellow: [VIDEO] Super Mario World: [LINK]

RecommendsView on HN
@alex-moon2025 · in “Bad Apple but it's played inside Super Mario Bros”

There is an amazing video of a similar exploit in Pokémon Yellow where they basically run a bunch of different games: [VIDEO]

RecommendsView on HN