Hallowizer

Results 5 comments of Hallowizer

This does work on 1.0U, but not with the standard stage1. We were able to get this to work on an RVT-R Reader after removing the credits from stage1.

Found another bug; https://github.com/reswitched/pegaswitch/blob/4d9d4866866091a6392c9a196f3074d39208d137/exploit/ipc.js#L153 this should be pushing to inputObjectIds, not inputObjectId.

Can you send the full mile? I thought I found something useful but it was cut off by your “skipping several hundred lines”.