How can a Use After Free exploit in Ocarina of Time lead to a cute robot taking over an entire N64 to put the future (and the Triforce) in the game using only button presses? This talk dives into the technical details of how a Use After Free exploit, Arbitrary Code Execution, and multiple bootstrap stages allowed TASBot to take full control of an original, unmodified cart and console in front of a live audience during SGDQ 2022 with the help of Sauraen and Savestate, helping raise more than $228k for charity. This talk uses engaging explainer graphics courtesy of RGME to dig into how a Use After Free vulnerability can be exploited as well as a live demo showing the significant social impact of the exploit Here Together, in the past year and into the future.

DEF CON (also written as DEFCON, Defcon or DC) is a hacker convention held annually in Las Vegas, Nevada. The first DEF CON took place in June 1993 and today many attendees at DEF CON include computer security professionals, journalists, lawyers, federal government employees, security researchers, students, and hackers with a general interest in software, computer architecture, hardware modification, conference badges, and anything else that can be "hacked". The event consists of several tracks of speakers about computer- and hacking-related subjects, as well as cyber-security challenges and competitions (known as hacking wargames). Contests held during the event are extremely varied, and can range from creating the longest Wi-Fi connection to finding the most effective way to cool a beer in the Nevada heat.

Legend of Zelda: Use After Free (TASBot glitches OoT)

Conference: Defcon 31

Authors: Allan Cecil keeper of TASBot, Liam "MLink" Taylor, Sauraen

Abstract

Post a comment

Related work

Ret2page: The Art of Exploiting Use-After-Free Vulnerabilities in the Dedicated Cache

Vacuum Cleaning Security—Pinky and the Brain Edition

A Deep Dive into macOS MDM (and How it can be Compromised)

Kubernetes Security: Attacking and Defending K8s Clusters

This is for the Pwners : Exploiting a WebKit 0-day in PlayStation 4

Taking Flight – 3 Experts Discuss Aerospace Cybersecurity