QUOTE(MatQuasar @ Jul 3 2023, 09:11 AM)
Found a DLL entry for BGGP4 by a user on Mastodon:QUOTE
Dn-FamiTracker-dll-hijack
BGGP4 Submission https://binary.golf/
Produce exactly 1 copy of itself ✅
Name the copy "4" ✅
Not execute the copied file ✅
Print, return, or display the number 4 ✅
Size: 19456 bggp4.dll (pretty big for a dll?)
Dn-FamiTracker v0.5.0.1 contains an undocumented plugins feature.
https://github.com/Dn-Programming-Core-Mana...racker/releases
Step 1. Download and unzip Dn-FamiTracker v0.5.0.1
Step 2. Create a folder called Plugins in the same directory as the exe
Step 3. Place attached DLL in the folder, name it bggp4.dll
Step 4. Launch Dn-Famitracker
BGGP4 Submission https://binary.golf/
Produce exactly 1 copy of itself ✅
Name the copy "4" ✅
Not execute the copied file ✅
Print, return, or display the number 4 ✅
Size: 19456 bggp4.dll (pretty big for a dll?)
Dn-FamiTracker v0.5.0.1 contains an undocumented plugins feature.
https://github.com/Dn-Programming-Core-Mana...racker/releases
Step 1. Download and unzip Dn-FamiTracker v0.5.0.1
Step 2. Create a folder called Plugins in the same directory as the exe
Step 3. Place attached DLL in the folder, name it bggp4.dll
Step 4. Launch Dn-Famitracker
https://github.com/eatscrayon/Dn-FamiTracker-dll-hijack
Mine is only 3KB! His/Hers is 19KB, I win!!!
But I understand that it is a hijack, his/her DLL has exported function only known to Dn-FamiTracker:
CODE
; fasm1 autogenerated include
; builder script: "export.cmd"
; library bggp4.dll, "C:\FASMW\bggp4.dll"
import bggp4.dll,\
file_exists, "file_exists"
; builder script: "export.cmd"
; library bggp4.dll, "C:\FASMW\bggp4.dll"
import bggp4.dll,\
file_exists, "file_exists"
I tried running "rundll32 bggp4.dll, file_exists" but it doesn't work that way.
Check out more on : https://haunted.computer/tags/BGGP4 on Mastodon, or
https://twitter.com/hashtag/BGGP4 on Twitter.
----
International visitors might see this thread if searched from Google, currently listed as no. 2 in search result using keyword "bggp4".
This post has been edited by MatQuasar: Aug 6 2023, 05:45 PM
Jul 31 2023, 09:12 PM


Quote









0.0164sec
0.49
5 queries
GZIP Disabled