Pwn2Own Toronto 2022 - Pwn2Own Offers $100,000 for Home Office Hacking Scenario

guest · Sep 3, 2022

By Eduard Kovacs @EduardKovacs - August 30, 2022

Trend Micro’s Zero Day Initiative (ZDI) has announced the targets and prizes for its next Pwn2Own hacking competition, as well as the introduction of a new category that aims to simulate a real world home office environment.

The next Pwn2Own will take place December 6-8, 2022, at ZDI’s office in Toronto, Canada. The registration deadline is December 2. The event will not take place alongside a conference so ZDI has decided to reimburse $3,000 for travel expenses to encourage hackers to participate in person. Bug bounty hunters can also compete remotely, with a ZDI employee in Toronto running the exploit for them.
Click to expand...

The organizer is offering a total of more than $1 million in cash and prizes for exploits targeting mobile phones, wireless routers, home automation hubs, smart speakers, printers and NAS devices.

This year, ZDI is introducing a new category called ‘The SOHO Smashup’, which can earn participants up to $100,000. This category aims to simulate a small office/home office (SOHO) scenario, with the goal being to hack a router via its WAN interface and then pivot into the local area network where the researcher needs to hack a different device, such as a printer, smart speaker or NAS device.
Click to expand...

Participants can earn up to $250,000 if they hack Apple’s iPhone 13 or Google’s Pixel 6. Hacking a Samsung Galaxy S22 can earn participants up to $50,000.

A cash prize of up to $60,000 is offered for smart speaker and home automation hub exploits.
Participants can earn up to $40,000 for Synology and WD NAS exploits, and between $5,000 and $30,000 for router vulnerabilities. Printer exploits are worth up to $20,000.
Click to expand...

Announcing Pwn2Own Toronto 2022 and Introducing the SOHO Smashup

Our Fall Pwn2Own event has become a bit of a nomad, having gone from Amsterdam to Tokyo to Austin. This year, we’re heading to Toronto to celebrate the 10th anniversary of the contest formerly known as Mobile Pwn2Own. Since 2012, we’ve expanded the contest to include devices beyond phones. This year is no different, with devices typically found on homes and home offices.
Click to expand...

Rasheed187 · Sep 2, 2022

I'm sorry but I find this contest a bit boring, I like it more when they are trying to hack software on Windows, Ubuntu and macOS. This is not my cup of tea.

guest · Dec 10, 2022

Pwn2Own Toronto 2022, Day 1: Hackers Earn $400,000 for Galaxy S22, SOHO Exploits
By Eduard Kovacs @EduardKovacs - December 7, 2022

On the first day of the Pwn2Own Toronto 2022 hacking competition, participants earned a total of $400,000 for new exploits targeting phones, printers, routers and NAS devices.
Click to expand...

The competition organized by Trend Micro’s Zero Day Initiative (ZDI) offers significant prizes for hacking mobile phones, wireless routers, home automation hubs, printers, smart speakers, and NAS devices.

The highest single reward on the first day went to the Devcore team, which participated in several Pwn2Own contests in the past years. They earned $100,000 for hacking a MikroTik router and a Canon printer connected to the router.
This reward is part of a new Pwn2Own category called “SOHO Smashup”, where a small office / home office (SOHO) scenario is simulated, with the goal being to hack a router on the WAN interface and then pivoting to the LAN, where a second device is hacked, such as a NAS appliance, a smart speaker, or a printer.
Click to expand...

Pwn2Own Toronto 2022 spans four days, with 26 contestants signing up for 66 exploits. ZDI said the number is unprecedented, and it has decided to only award the full cash prize to the first winner of each target, with subsequent exploits getting 50% of the prize money.
Click to expand...

Pwn2Own Toronto 2022 - Day One Results

Welcome to the first day of Pwn2Own Toronto for 2022. We’ll be updating this blog in real time as results become available. Even though we have an unprecedented number of entries this year, we are going to buy all additional rounds that have entered the competition. The first winner on each target will receive the full cash award and the devices under test. For the second and subsequent rounds on each target, all other winners will receive 50% of the prize package, however, they will still earn the full Master of Pwn points.
Click to expand...

guest · Dec 10, 2022

Samsung Galaxy S22 hacked again on second day of Pwn2Own
By Sergiu Gatlan @serghei - December 8, 2022

Contestants hacked the Samsung Galaxy S22 again during the second day of the consumer-focused Pwn2Own 2022 competition in Toronto, Canada.
Click to expand...

They also demoed exploits targeting zero-day vulnerabilities in routers, printers, smart speakers, and Network Attached Storage (NAS) devices from HP, NETGEAR, Synology, Sonos, TP-Link, Canon, Lexmark, and Western Digital.

Security researchers representing the vulnerability research company Interrupt Labs were the ones to demonstrate a successful exploit against Samsung's flagship device on Wednesday.
Click to expand...

The second day of Pwn2Own Toronto wrapped up with Trend Micro's Zero Day Initiative awarding $281,500 for 17 unique bugs across multiple categories.

This brings the first two days of Pwn2Own total to $681,250 awarded for 46 unique zero-days, as ZDI's Head of Threat Awareness Dustin Childs revealed.
The full schedule for Pwn2Own Toronto 2022's second day and the results for each challenge are available here. You can also find the complete schedule of the competition here.
Click to expand...

Pwn2Own Toronto 2022 - Day Two Results

Welcome back to Pwn2Own Toronto! Yesterday, we awarded $400,000 for 26 unique 0-days. We saw the Samsung Galaxy exploited twice and two successful demonstrations in the SOHO Smashup category. Today’s event’s look to be just as exciting. We’ll be updating this blog with results throughout the day.
Click to expand...

guest · Dec 10, 2022

SOHO Exploits Earn Hackers Over $100,000 on Day 3 of Pwn2Own Toronto 2022
By Eduard Kovacs @EduardKovacs - December 9, 2022

Trend Micro’s Zero Day Initiative (ZDI) announced total payouts nearing $1 million after the first three days of Pwn2Own Toronto 2022, and there is one day left to go.
Click to expand...

On the third day of the event, participants earned a total of $253,500 for hacking NAS devices, printers, smart speakers, routers, and smartphones. ZDI said $681,000 was paid out in the first two days.

The new SOHO Smashup category earned participants the highest amounts on the third day. In this category, a small office / home office (SOHO) scenario is simulated, with the goal being to hack a router on the WAN interface and then pivoting to the LAN, where a second device needs to be hacked, such as a smart speaker, NAS appliance, or printer.
Click to expand...

Pwn2Own Toronto 2022 - Day Three Results

Welcome back to Pwn2Own Toronto! Yesterday, we awarded another $281,500 for 17 unique bugs across multiple categories. That brings our two-day total to $681,250 awarded for 46 unique 0-days. Today’s highlights include more attempts at the Samsung Galaxy, entries in the SOHO Smashup category, and more smart speaker. We’ll be updating this blog with results throughout the day.
Click to expand...

guest · Dec 11, 2022

Hackers earn $989,750 for 63 zero-days exploited at Pwn2Own Toronto
By Sergiu Gatlan @serghei - December 10, 2022

Pwn2Own Toronto 2022 has ended with competitors earning $989,750 for 63 zero-day exploits (and multiple bug collisions) targeting consumer products between December 6th and December 9th.
Click to expand...

While no team signed up to hack the Apple iPhone 13 and Google Pixel 6 smartphones, the contestants hacked a fully patched Samsung Galaxy S22 four times.
Another contestant, known as Chim, demoed one more successful exploit targeting the Samsung Galaxy S22 on the first day of the contest.
Click to expand...

After the zero-day vulnerabilities exploited during the Pwn2Own event are reported, vendors are given 120 days to release patches before ZDI publicly discloses them.

The DEVCORE team won the contest, earning $142,500 and 18.5 Master of Pwn points. They are followed on the leaderboard by Team Viettel with $82,500 and 16.5 points and NCC Group EDG with $78.750 and 15.5 points.
Click to expand...

Pwn2Own Toronto 2022 - Day Four Results and Master of Pwn

Welcome back to the final day of Pwn2Own Toronto for 2022! Yesterday, we awarded another $253,500 USD, which brings our three-day total to $934,750. While that alone would make it an amazing event, we’ve got another full day of exploitation ahead of us. Stay tuned as we update this blog with results as we get them and total the points to crown the Master of Pwn.
Click to expand...

Log in or Sign up

Pwn2Own Toronto 2022 - Pwn2Own Offers $100,000 for Home Office Hacking Scenario

guest Guest

Rasheed187 Registered Member

guest Guest

guest Guest

guest Guest

guest Guest

Log in or Sign up

Pwn2Own Toronto 2022 - Pwn2Own Offers $100,000 for Home Office Hacking Scenario

guest Guest

Rasheed187 Registered Member

guest Guest

guest Guest

guest Guest

guest Guest

Useful Searches