October 23, 2024 at 10:03AM
On the first day of Pwn2Own Ireland, participants showcased 52 zero-day vulnerabilities, earning $486,250 in prizes. Viettel Cyber Security led with 13 points, while notable exploits included a $100,000 success by Summoning Team. The event featured various challenges, with three days remaining for competitors to exploit patched SOHO devices.
### Meeting Takeaways – Pwn2Own Ireland Day 1
1. **Event Overview:**
– 52 zero-day vulnerabilities were demonstrated by participants.
– Total cash prizes awarded: **$486,250**.
2. **Leading Team:**
– **Viettel Cyber Security**:
– Scored **13 points**.
– Successful exploit on Lorex 2K WiFi camera earned **$30,000** and 3 points.
– Additional exploit from QNAP to TrueNAS earned **$50,000** and 10 points.
3. **Notable Individual Performances:**
– **Sina Kheirkhah** (Summoning Team):
– Demonstrated a chain of nine vulnerabilities from QNAP QHora-322 router to TrueNAS Mini X.
– Awarded **$100,000** and **10 Master of Pwn points**.
– **Jack Dates** (RET2 Systems):
– Exploited Sonos Era 300 for **$60,000** and 6 points.
4. **Other Noteworthy Attempts:**
– **Team Neodyme**: HP Color LaserJet Pro MFP 3301fdw printer exploit for **$20,000** and 2 points.
– **PHP Hooligans / Midnight Blue**: Canon imageCLASS MF656Cdw printer for **$20,000**.
– **ExLuck of ANHTUD**: QNAP TS-464 NAS device exploit for **$40,000** and 4 points.
– **Rapid7**: Synology DiskStation DS1823xs+ exploit for **$40,000** and 4 points.
5. **Challenges Faced:**
– Summoning Team struggled with QNAP TS-464 and Synology BeeStation BST150-4T exploits, unable to execute in time.
– Synacktiv experienced a bug collision in their Lorex 2K camera exploit, leading to a reduced payout of **$11,250**.
6. **Upcoming Days:**
– Three more competition days remain.
– Participants can exploit fully patched SOHO devices for a share of a **$1 million prize pool**. Devices include printers, NAS systems, WiFi cameras, routers, smart speakers, and Samsung Galaxy S24 mobile phones.
### Conclusion:
Day 1 was marked by significant achievements and some challenges, setting the stage for continued competition and the potential for further rewards over the remaining days.