HackerTube.dev

[TAS] Super Mario World "Arbitrary Code Execution" in 02:25.19 by Masterjun

Masterjun3 · 943K views · 2014-01-06 · 2:29

Open on YouTube ↗

If playback is restricted in your region, try opening the original video. Use Mark watched to add it to your marked videos.

Overview

A tool-assisted speedrun of Super Mario World that achieves arbitrary code execution through frame-precise controller inputs, finishing in 2:25. It was also performed live on real hardware at AGDQ 2014.

On Hacker News

Cited as the classic example of arbitrary code execution inside a game, with later runs injecting Pong, Snake and Flappy Bird.

Discussed on HN; no positive recommendation is recorded in this export · HN mentions 2015–2021

Topics

Speedrunning, glitches & game hacking
Search by tags
super mario worldtool-assisted speedrunglitch exploitssnesagdq

What people said

duskwuff · 2021-03 · Reference

Somewhat disappointed. I was expecting them to use the well-known arbitrary code execution exploit in this game to load their own implementation of FizzBuzz, cf. [VIDEO] The method used by Masterjun3 is TAS-only (it involves executing the contents of the controller registers as code, which requires frame-precise inputs), but there are some other methods which are more viable for a real-time attack.

Read the original HN comment ↗
politician · 2019-04 · Reference

That's wild because Super Mario Bros contains a built-in code editor (via arbitrary code execution easter eggs), and Nintendo is OK with that. [VIDEO]

Read the original HN comment ↗
crankylinuxuser · 2018-02 · Reference

[VIDEO] Video is about exploiting Super Mario world, on SNES. The result is that the exploiter then proceeds to make 2 new games inside SMW: Pong and Snake. Those games don't exist inside SMW. They were uploaded using controller inputs. All it takes is 1 hack.

Read the original HN comment ↗

Sources

Video by Masterjun3, played through YouTube.

Data and selection notes

HN summaries and labels may contain AI errors. HN dates refer to discussions, not video publication.

HN Library: HackerTube export (2026-10-31) and open-index/hacker-news. Upstream summaries and classifications may contain AI errors.

Views, duration and playback status refresh separately from the published catalog. When an update fails, existing data remains visible.

Selection checks
  • SaaS & AI candidates: Topic keywords do not match
  • Editor-approved picks: Editorial review is required

Rule matches identify candidates. They do not guarantee video quality or financial results.

About the library and its sources