Ralty Raltyro

Vulnerable emulator is Project 64 1.6.x/1.7. 2 vulnerabilities can be used to gain arbitrary code execution from emulation container from N64 ROM.

Container escape and arbitrary writes from N64 ROM outside of designated N64 RAM

Vulnerable function Compile_R4300i_SB and its friends Compile_R4300i_S* https://github.com/zeromus/pj64/blob/master/RecompilerOps.cpp#L1955C6-L2024

If non const Opcode.base is used to avoid condition at 1961-1971 which does checks properly, we can load from volatile address addr (compiled to MIPS asm inside ROM):

List of Friday Night Funkin' Engines:

Vanilla

The base game. Like vanilla ice cream, some people find it bland while, for others, it's their personal favorite. Only version available on Newgrounds (re-uploads of FNF or even mods aren't allowed). The Newgrounds web-only edition (no source code available) includes spritemap animations for cutscenes (the Tricky Mod uses pre-rendered videos), custom keybinds, and note splashes.

Kade Engine

One of the original modded engines, developed for the Full Ass Tricky Mod, and later separately maintained. Focused on high-level play, featuring a reworked input system, improved player stats like a results screen hitgraph, and custom keybinds. The most common engine to use in mods (even if it isn't the simplest to mod).

	import numpy as np
	import soundfile as sf
	from scipy.fftpack import fft, ifft

	def rotateSignal(signal,flip):
	if flip:
	signal = signal[::-1]

	x = np.concatenate((signal, signal[1:][::-1])) # concatenating the array with a reverse of itself makes it such that the fourier transform doesn't layer over a reversed version of itself in the inverse fft
	rotSig = ifft(x)

	// ==UserScript==
	// @name Remove Twitter Blue Promotions
	// @namespace https://d23.dev/
	// @version 1.1
	// @description Removes the "Get Verified" box on the Home page and the "Verified" button on the sidebar
	// @author angeld23
	// @match ://.twitter.com/*
	// @icon https://www.google.com/s2/favicons?sz=64&domain=twitter.com
	// @grant none
	// ==/UserScript==

	local scriptFileName = stringSplit(scriptName, '/')
	scriptFileName = scriptFileName[#scriptFileName]
	local src = scriptName:sub(1, - #scriptFileName - 1)
	local function warn()
	debugPrint('Please download and put RalLib into the same folder as script.')
	debugPrint('RalLib.lua file is not present in the scripts directory.')
	debugPrint('')
	debugPrint('')
	end
	if buildTarget == 'windows' then -- windows

	/*
	!! The feature that uses this endpoint has recently started rolling out to users.
	!! See `App > Avatar > Profile Picture Editor`
	!!
	!! You may continue using this script, the only advantage is being able to
	!! customize FullBody and Closeup independently.
	*/

	/**
	* A list of process names for several popular screen recording programs.
	* Add more if you think of any.
	*/
	static final SCREEN_RECORDERS:Array<String> = [
	"obs32.exe", "obs64.exe", "obs.exe",
	"xsplit.core.exe", "livehime.exe", "pandatool.exe",
	"yymixer.exe", "douyutool.exe", "huomaotool.exe"
	];

	#!/usr/bin/env python3

	# MIT License
	#
	# Copyright (c) 2021 HTV04
	#
	# Permission is hereby granted, free of charge, to any person obtaining a copy
	# of this software and associated documentation files (the "Software"), to deal
	# in the Software without restriction, including without limitation the rights
	# to use, copy, modify, merge, publish, distribute, sublicense, and/or sell

	using System;
	using System.Drawing;

	namespace TexturePacker
	{
	public class PackedNode
	{
	public PackedNode Left { get; private set; }
	public PackedNode Right { get; private set; }
	public System.Drawing.Rectangle Rect { get; private set; }

	-- black frames not included

	local RunService = game:GetService("RunService")
	local Workspace = game:GetService("Workspace")

	local Camera = Workspace.CurrentCamera

	local Module = {}

	Module.Position = UDim2.new(0, 0, 0, 0)