How (Not) to Metagame Pwn2own скачать в хорошем качестве

How (Not) to Metagame Pwn2own

R0 0816 Pwn2Own is as much a strategy game as it is a hacking competition. With its growing popularity and increasing number of skilled participants, the event has become more competitive than ever. This in turn leads to more bug collisions, and smaller and less consistent payouts. In this talk, we’ll dissect the evolving meta around Pwn2Own and share some of our strategies and hard-earned lessons from our Pwn2Own Ireland adventures. We’ll go over our target selection process and give you a timeline of our research process. Including some of the less glamorous realities of Pwn2Own, such as last minute patches killing exploits, long rabbit holes that led nowhere, and failed attempts. In the second half, we’ll dig into some of the devices we actually managed to exploit. We’ll break down a few of our exploit chains, including how we set up and pulled off our SOHO router chain. Along the way, we’ll talk about how we handled risk, when we decided to burn bugs, and how a last-minute Hail Mary (using some quick-and-dirty tracing) saved one of our entries mere hours before going on stage. If you’ve ever been curious about what really happens beyond the 10-minute exploit attempts, this talk will pull back the curtain on all the prep, setbacks, and last-minute scrambles that go into competing at Pwn2Own. Rick and Carlo are part of the Pwn2Own team "PHP Hooligans". They have competed in five editions of Pwn2Own, exploiting a wide range of targets including routers, printers, and automotive targets. Aside from Pwn2Own, Rick is an avid CTF player, having competed as part of 0rganizers and ICC's team Europe. Carlo is a founding partner of the boutique security consultancy firm Midnight Blue and is most known for his research into TETRA, the MIFARE Classic Crypto1 RFID cipher, and the security of self-encrypting drives. Rick de Jager Pwn2Own contestant, CTF Player Socials: X: https://x.com/rdjgr linkedin:   / rdjgr   Carlo Meijer Founding partner at Midnight Blue, Pwn2Own contestant, Socials: X: https://x.com/midnightbluelab linkedin:   / carlo-meijer-6160a9285