Using Security Vulnerabilities to Get Every World Record in Mario Kart Wii @Malleo

Uploaded November 2023 | Updated September 2026, 2 weeks ago

In this video, I explore the use of security vulnerabilities in Mario Kart Wii and the Wii's embedded operating system to alter the game's code on an unmodified console.

An unedited video of the payload execution starting from factory reset can be found here: youtube.com/watch?v=TU_HhFweKQ8

Here is a write-up on how you can try out a demo script: pastebin.com/fUqRhady

Thanks to:
shutterbug2000: twitter.com/shutterbug20002
Seeky: youtube.com/@SeekyCt and github.com/SeekyCt
Wiimm: youtube.com/@Wiimm1 and github.com/Wiimm
Leseratte: youtube.com/@Leseratte and github.com/Leseratte10
_____________________________
Twitter: twitter.com/tasmalleo
Twitch: twitch.tv/tasmalleo
Join my Discord! discord.gg/VRk59mY
Intro/Outro by TheSneakySpy: twitter.com/TheSneakySpy and youtube.com/TheSneakySpy
Check out Mario Kart Wii TASes: mkwtas.com

Using Security Vulnerabilities to Get Every World Record in Mario Kart Wii

Paper Mario: The Thousand-Year Door - Plane Panel Skip

(TAS) Paper Mario: The Thousand-Year Door - Chapter 3 in 1:54:19.867 by Malleo

$Sonic Heroes (TAS) - Robot Carnival (Team Sonic) in 1:17.98{WR} [16:9] This is a Tool Assisted Speedrun (TAS). For more info, please visit http://tasvideos.org Watch in HD if you can, it looks a lot better! If you prefer to watch a 4:3 encode (with input display), its available in Taless channel: https://www.youtube.com/watch?v=kXdmDUlyCFM Authors: Tales (THC98) and Malleo Taless Youtube Channel: https://www.youtube.com/channel/UCG0Aesa0PrUzH 6rlO9xqg Special thanks to Gamepro011, CriticalCyd, Deku, JustLemres, FusionVaria, and Sewer56 for all their help during the creation of this TAS. We decided to release this as an IL because we werent aware of any previous TAS of this boss fight. Were both pretty happy with the result. Right at the start of the cutscene before the boss, there is one frame that the controller inputs are registered by the game and you can actually do any action. If you kick in that frame, you actually can control the characters for the rest of the cutscene and everything gets messed up. As that doesnt cost any frame and looks hillarious, we decided to leave that in the TAS! :P Now for a more useful version of that exploit, in the cutscene where the boss text shows up, theres another frame that controller inputs are registered. We used that frame to switch to Knuckles and punch to the right. That put us in a very good position for the start of the boss, so getting the first homing attack was a lot easier. For the first two wave, the fastest method of killing enemies was to homing attack with Sonic and have Tails and Knuckles hit each enemy after Sonic does in order to kill it. By this point, we manipulated 2 Tails powerups in order to get Tails to level 2, which allows his thundershoot to do enough damage to one-shot flying enemies. Thundershoots are used on waves three, four and five. For the fifth wave that contains the four flying enemies in a circle, we shot Sonic out before the enemies spawn. Right as the enemies spawn, we shot out Knuckles. In doing so, Sonic was able to eliminate the farthest enemy and kill the enemy to the left while Knuckles killed the closest enemy and the enemy to the right. This saved a decent amount of time over having just Sonic or Knuckles travel in a full circle to kill all the enemies. By the sixth wave, we manipulated level 3 Knuckles. Knuckless triple punch allows him to shoot out fireballs, and damages enemies within a certain radius. On the sixth wave, we performed the triple punch to kill the ground robots, then switched to Tails and thundershot the purple flappers. Waves seven, eight, and nine can be killed immediately upon spawning by using a triple punch. On wave ten, we used the same tactic as wave five. We shot Sonic out way before the enemies spawn and Knuckles right as they spawn, such that Sonic kills the farthest enemy and all enemies to the left while Knuckles kills the closest enemy and all enemies to the right. Wave eleven can be taken out instantly with a triple punch. There are three robots that spawn later than the rest of the enemies, so we had to time out fire punch so that the enemies that spawn later would die instantly. For the last wave, we start with a triple punch, however since the enemies are falling, they dont get hit until a certain time. However, by having Sonic or Tails kill the lowest robot earlier, all the other robots blow up from the triple punch much faster than they normally would. We have decided that this will be the last individual level that we will be releasing until the entire Team Sonic TAS is finished. For updates, be sure to follow us on twitter: http://twitter.com/tasmalleo http://twitter.com/thc_98 Game version: NTSC-U in Gamecube Emulator: Dolphin 5.0 stable Total Rerecords: 67664 (As we branched out from multiple .dtm files, this count is likely not very accurate) Real time WR: 1:20.00 by Sonicspeedruner https://www.youtube.com/watch?v=tScDjo39RsI$

[MK8] Mount Wario - 1:45.266 by Tyler (3rd Worldwide)

PM64 All Cards TAS - Streaming It Tomorrow!

Paper Mario: The Thousand-Year Door - Spazzy Pipe Glitch

Dolphin - A Complete Guide to TASing in Mario Kart Wii

Malleo |

Using Security Vulnerabilities to Get Every World Record in Mario Kart Wii