Pwn2Own is a computer hacking contest held annually by Trend Micro’s Zero Day Initiative - ZDI. Contestants are challenged to exploit widely used software and mobile devices with previously unknown vulnerabilities. Winners of the contest receive the device that they exploited and a cash prize. The total prize for each contest is up to millions of dollars.
The 2024 spring edition of Pwn2Own (Pwn2Own Vancouver) was held from 20th March to 21st March 2022 in a hybrid format where participants are back to competing in-person and in virtual.
Our researchers have managed to be 5th place overall.
Nguyễn Hoàng Thạch has successfully Pwned the VMware Workstation in the Virtualization Category.
Billy Jheng Bing-Jhong, Đỗ Minh Tuấn and Muhammad Alifa Ramdhan has successfully Pwned the Ubuntu OS in the Local Escalation of Privilege Category.
Billy Jheng Bing-Jhong, Đỗ Minh Tuấn and Muhammad Alifa Ramdhan has successfully Pwned the Docker Desktop in the Cloud-Native/Container Category
References
- https://www.zerodayinitiative.com/blog/2024/1/16/pwn2own-vancouver-2024-bring-cloud-nativecontainer-security-to-pwn2own
- https://twitter.com/thezdi/status/1771000382392619297
- https://twitter.com/thezdi/status/1770909249725452698
- https://twitter.com/thezdi/status/1770937055083643231
- https://twitter.com/thezdi/status/1770965747860115687