Pwn2Own Toronto 2022 Zotsatira

Zotsatira za masiku anayi a mpikisano wa Pwn2Own Toronto 2022, pomwe zofooka za 63 zomwe sizinadziwike kale (0-day) zidawonetsedwa pazida zam'manja, osindikiza, olankhula anzeru, makina osungira ndi ma routers, adatulutsidwa positi.

Kwa iwo omwe sadziwa Pwn2Own, muyenera kudziwa kuti uwu ndi mpikisano wobera womwe umachitika chaka chilichonse pamsonkhano wachitetezo wa CanSecWest. Choyamba unachitikira mu April 2007 ku Vancouver.

M'kope latsopano la mpikisanowu, magulu achitetezo 36 ndi ofufuza adatenga nawo gawo. Gulu lopambana kwambiri la DEVCORE lidakwanitsa kupambana $142 kuchokera pampikisano. Opambana achiwiri (Team Viettel) adalandira $82,000 ndipo opambana pachitatu (gulu la NCC) adalandira $78,000.

Pampikisanowu, magulu achitetezo a 26 ndi ofufuza adayang'ana kwambiri zida zomwe zili m'magulu a mafoni am'manja, malo opangira makina apanyumba, osindikiza, ma routers opanda zingwe, zosungirako zolumikizidwa ndi netiweki, ndi olankhula anzeru, zonse zaposachedwa komanso zokhazikika.

“Ndipo tamaliza! Zotsatira zonse za Tsiku Lachinayi zili pansipa. Tikupereka $55,000 ina lero, kubweretsa mpikisano wathu wonse ku $989,750. Pampikisanowu, tidagula masiku 63 apadera a ziro. Mutu wa Master of Pwn udapitilira, koma gulu la DEVCORE lidatenga mutu wawo wachiwiri ndikupeza $142,500 ndi 18.5. werengani positi yofalitsidwa ndi ZDI. "Gulu la Viettel ndi gulu la NCC linali pafupi kwambiri ndi 16,5 ndi 15,5 motsatana. Tikuthokoza onse omwe apikisana nawo a Pwn2Own komanso opambana. "

Patsiku lachinayi la mpikisano, wofufuza Chris Anastasio adawonetsa kusefukira kochokera mulu motsutsana ndi chosindikizira cha Lexmark. Adapambana $10,000 ndi 1 Master of Pwn point.

Pampikisanowu, ziwopsezo zomwe zidapangitsa kuti pakhale ma code akutali pazida zidawonetsedwa:

• Canon imageCLASS MF743Cdw Printer (11 kuukira kopambana, $5,000 ndi $10,000 mabonasi).
• Printer ya Lexmark MC3224i (zoukira zisanu ndi zitatu, $8, $7500 ndi $10000 zolipirira).
• HP Colour LaserJet Pro M479fdw Printer (5 kuukira, $5,000, $10,000 ndi $20,000 mabonasi).
• Sonos One Speaker Smart Speaker (3 kuukira, $22,500 ndi $60,000 mabonasi).
• Synology DiskStation DS920+ NAS (kuukira kuwiri, $40 ndi $000 premiums).
• WD My Cloud Pro PR4100 NAS (mphoto 3 za $20 ndi mphotho imodzi ya $000).
• Synology RT6600ax Router (5 WAN ikuukira ndi ma premium a $20 ndi ma premium awiri a $000 ndi $5000 pakuwukira kumodzi kwa LAN).
• Cisco C921-4P Integrated Services Router ($37,500).
• Mikrotik RouterBoard RB2011UiAS-IN rauta (bonasi ya $ 100 pakubera masitepe angapo: rauta ya Mikrotik idawukiridwa koyamba, ndiyeno, atatha kupeza LAN, chosindikizira cha Canon).
• NETGEAR RAX30 AX2400 Router (kuukira 7, $1250, $2500, $5000, $7500, $8500 ndi $10000 mabonasi).
• TP-Link AX1800/Archer AX21 rauta (WAN kuukira $20 umafunika ndi LAN kuukira $000 umafunika).
• Ubiquiti EdgeRouter X SFP rauta ($50,000).
• Samsung Galaxy S22 foni yamakono (4 kuukira, mphoto zitatu za $25,000 ndi mphoto imodzi ya $50,000).

Kuphatikiza pa ziwonetsero zomwe zidapambana kale, Kuyesera 11 kugwiritsa ntchito zofooka kwalephera. Popeza pampikisanowo, mphotho zidaperekedwanso pakubera Apple's iPhone 13 ndi Google Pixel 6, koma panalibe zofunsira zowukira, ngakhale mphotho yayikulu yokonzekera machenjerero omwe amalola kupha ma code a kernel pazida izi anali $250.000.

Ndikoyenera kutchula izi mphotho zoperekedwa ndi kuthyolako kunyumba automation machitidwe Amazon Echo Show 15, Meta Portal Go, ndi Google Nest Hub Max, komanso Apple HomePod Mini, Amazon Echo Studio, ndi olankhula anzeru a Google Nest Audio., yomwe mphotho yachinyengo inali $60,000.

Kumbali ya zofooka zomwe zawonetsedwa m'magawo osiyanasiyana, mavutowo sadzafotokozedwa poyera malinga ndi zomwe mpikisanowo ukunena, zambiri zokhudzana ndi zovuta zonse zomwe zawonetsedwa pamasiku a 0 zidzasindikizidwa pakangotha ​​masiku 120, omwe ali. kuperekedwa pokonzekera zosintha ndi opanga kuti athetse zovuta.

Zowukirazo zidagwiritsa ntchito ma firmware aposachedwa ndi makina ogwiritsira ntchito okhala ndi zosintha zonse zomwe zilipo komanso zosintha zosasintha. Ndalama zonse zomwe zaperekedwa zinali $934.750.

Mapeto ngati mukufuna kudziwa zambiri za izi za mtundu watsopano wa Pwn2Own, mutha kuwona zambiri Mu ulalo wotsatira.