I recently read a piece by on Twitter that garnered by attention. Back when the internet was fun, at https://tumblr.com/tgcecc , there existed a competition to create errors from C++. Now we also have the new shit, Rust. I figured it’d be fun to bring back this internet phenomena and try and revive it.

Introduction

VTube Studio is a freeware program that allows people to VTube. Essentially if you have an RTX card or if you have an iPhone, you hook it up to your PC and you can then control a VTuber Avatar. An example of a VTuber Avatar is seen below.

VTube Studio has a large attack surface, both local and remote. Today we’ll be exploring the local vulnerabilities I found in VTS.

What’s ret2plt?

Besides an exploitation technique, we are a group of individuals who seek to better the world by exploiting it. We’re curretly taking on novel work such as research into VTube Studio.