๐ Welcome to Pwn2Own 2020 - The Schedule and Live Results
๐ก Newskategorie: Hacking
๐ Quelle: thezdi.com
Welcome to Pwn2Own 2020! This yearโs contest will be the first where all attempts occur remotely. We have contestants from around the world ready to demonstrate some amazing research, and we have ZDI researchers ready to run and verify their attempts. Our returning partner Microsoft and sponsor VMware will also be online with us, as well as other affected vendors. We might not be in the same room, but weโre virtually together and ready for a fantastic contest.
The schedule for today is posted below, and weโll be updating this blog throughout the day with results and updates. Weโll post a full summary of todayโs events (including videos of the attempts) tomorrow morning.
As always, we started the contest with a random drawing to determine the order of attempts. We have four attempts scheduled for today and four queued up for tomorrow. The full schedule for Day One is below (all times Pacific [UTC -7:00]). We will update this schedule with results as they become available.
Day One โ March 18, 2020
1000 - The Georgia Tech Systems Software & Security Lab (@SSLab_Gatech) team of Yong Hwi Jin (@jinmo123), Jungwon Lim (@setuid0x0_), and Insu Yun (@insu_yun_en) targeting Apple Safari with a macOS kernel escalation of privilege.
1200 - Flourescence targeting Microsoft Windows with a local privilege escalation.
1400 - Manfred Paul of the RedRocket CTF team targeting the Ubuntu Desktop with a local privilege escalation.
1600 - The Fluoroacetate team of Amat Cama and Richard Zhu targeting Microsoft Windows with a local privilege escalation.
Day Two โ March 19, 2020
1000 - Phi Phแบกm Hแปng (@4nhdaden) of STAR Labs (@starlabs_sg) targeting Oracle VirtualBox in the Virtualization category.
1200 - The Fluoroacetate team of Amat Cama and Richard Zhu targeting Adobe Reader with a Windows local privilege escalation.
1400 - The Synacktiv team of Corentin Bayet (@OnlyTheDuck) and Bruno Pujos (@BrunoPujos) targeting the VMware Workstation in the Virtualization category.
1600 - Special demonstration from Lucas Leong of the Zero Day Initiative against Oracle VirtualBox.
As always, weโll update this blog with results throughout the day and recap each dayโs events in a separate post. You can also find the latest results by following ourย Twitterย feed. Best of luck to all of our contestants!
...