October 24, 2024 at 10:04AM
On day two of Pwn2Own Ireland 2024, white hat hackers exposed 51 zero-day vulnerabilities, winning $358,625. The Viettel Cyber Security team led the competition, with participants like Pham Tuan Son and Ken Gannon achieving significant points and payouts. Overall, 103 vulnerabilities have been exploited, totaling $847,875 in prizes.
**Meeting Takeaways from Pwn2Own Ireland 2024 – Day 2:**
1. **Event Overview:**
– On the second day, 51 zero-day vulnerabilities were showcased, with total cash prizes amounting to $358,625.
– The total vulnerabilities exploited to date in the competition reached 103, with a cumulative prize pot of $847,875.
2. **Key Performers:**
– Viettel Cyber Security team continued to lead in the “Master of Pwn” title race.
– Notable contributions included:
– **Pham Tuan Son & ExLuck (ANHTUD):** Exploited a Canon printer (stack-based buffer overflow), earning $10,000 and 2 points.
– **Ken Gannon (NCC Group):** Exploited a Samsung Galaxy S24 (multiple bugs), earning $50,000 and 5 points, gaining shell access.
– **Dungdm (Viettel Cyber Security):** Controlled a Sonos Era 300 (UAF vulnerability), securing $30,000 and 6 points.
– **Chris Anastasio & Fabius Watson (Team Cluck):** Exploited a QNAP NAS (CRLF injection), earning $20,000 and 4 points.
– **Corentin BAYET (Reverse Tactics):** Targeted a QNAP router, earning $41,750 and 8.5 points despite using a previously exploited vulnerability.
3. **Collisions and Failures:**
– Several collisions occurred where multiple researchers used the same exploit, affecting payout and points for Tenable and Synactiv.
– Challenges in executing exploits on devices such as the Sonos Era 300 and Lexmark printer were reported, leading to reduced success for DEVCORE, Rapid7, and Neodyme.
4. **Competition Status:**
– The competition remains competitive with two days left, allowing participants to improve their standings.
– The overall environment is marked by both advancements in exploitations and obstacles faced by participants, keeping the intensity high leading into the final days.