Gwangun Jung

Another collision! @fluorite_pwn, @YunjeShin, @yskm_Gunter, @Mafty5275, @clay419, @vvsy46, and @won6_choi of BoB::Takedown targeted the Grizzl-E Smart 40A, hitting one collision and one unique 0-day, earning $15,000 USD and 3 Master of Pwn points. #Pwn2Own #P2OAuto

Confirmed! Their enthusiasm was rewarded as they used an integer overflow to escape #Oracle VirtualBox and execute code on the underlying OS. They earn $40,000 and 4 Master of Pwn points. #Pwn2Own #P2OBerlin

And that bring Day One of #Pwn2Own Berlin to a close. We awarded $260,000 today, but more great research is yet to come. STAR Labs has an early lead on Master of Pwn, but it's anyone's game at this point. Stay tuned for more results as we go.

We have another collision. Hyunwoo Kim (@V4bel) and Wongi Lee (@_qwerty_po) of Theori were able to escalate to root on Red Hat Linux with an info leak and a UAF, but one of the bugs used was an N-day. They still win $15,000 and 1.5 Master of Pwn points. #Pwn2Own

Guest Revolution: Our Story of Compromising the Host Kernel from the VMware Guest by @bbbig12 & @pr0Ln #HEXACON2024