HackerTube.dev

Super Mario World: Arbitrary Code Injection At AGDQ 2014, Performed Live

invalidation · 224.6K views · 2014-01-21 · 6:08

Open on YouTube ↗

If playback is restricted in your region, try opening the original video. Use Mark watched to add it to your marked videos.

Overview

A live performance at AGDQ 2014 in which Super Mario World is made to execute arbitrary injected code, running other games like Pong and Snake on the cartridge. It is done through a TASBot feeding precise controller inputs.

On Hacker News

Used as the canonical example of arbitrary code execution through nothing but controller input, often in talks about speedrunning and exploits.

Discussed on HN; no positive recommendation is recorded in this export · HN mentions 2019–2025

Topics

Search by tags

What people said

pdpi · 2025-03 · Reference

At its most extreme, this crossover gets you things like arbitrary code execution on Super Mario World. EDIT: There was supposed to be a link here. [VIDEO]

Read the original HN comment ↗
SkeuomorphicBee · 2022-07 · Reference

Just to add some context, arbitrary code execution in Super Mario World is nothing new, it has been known since 2014. There was a tool assisted demonstration at Awesome Games Done Quick 2014 [1] where they inject a pong and a snake game using a TASBot (a robot controller that replays input scripts to the console). And in 2016 a streamer performed it manually to inject a flappy birds game [2] (this second video is really good, he goes into detail of the process). So, what this newer demonstration brings is the use of the known arbitrary code execution capabilities of "Super Mario World" to help finish all 5 games in "Super Mario All-Stars + Super Mario World" as quick as possible. [1] [VIDEO] [2] [LINK]

Read the original HN comment ↗
eatitraw · 2019-09 · Reference

> Evolved player makes invalid moves far away in the board, causing opponent players to run out of memory and crash Well, this sounds like speedrunning. People have found arbitrary code execution vulnerabilities in SNES and used them to jump to the credits (which counts as completed the game) in less than a minute: [LINK] They also used the same technique to inject runnable code in the game: [VIDEO]

Read the original HN comment ↗

Sources

Video by invalidation, played through YouTube.

Data and selection notes

HN summaries and labels may contain AI errors. HN dates refer to discussions, not video publication.

HN Library: HackerTube export (2026-10-31) and open-index/hacker-news. Upstream summaries and classifications may contain AI errors.

Views, duration and playback status refresh separately from the published catalog. When an update fails, existing data remains visible.

Selection checks
  • SaaS & AI candidates: Topic keywords do not match
  • Editor-approved picks: Editorial review is required

Rule matches identify candidates. They do not guarantee video quality or financial results.

About the library and its sources