Dhawaan ayay is -garteen iyada oo loo marayo boostada blog natiijooyinka saddexda maalmood ee tartanka Pwn2Own 2022, kaas oo la qabto sanadkiiba mar iyadoo qayb ka ah shirka CanSecWest.
In daabacaadda sanadkan Farsamooyinka ayaa la soo bandhigay si ay uga shaqeeyaan ka faa'iidaysiga dayacanka hore loo aqoon loogu talagalay Ubuntu Desktop, Virtualbox, Safari, Windows 11, Kooxaha Microsoft iyo Firefox. Isku soo wada duuboo, 25 weerar oo lagu guulaystay ayaa la soo bandhigay saddex isku dayna waxa ay ku dhamaadeen fashil. Weerarradu waxay adeegsadeen noocyadii ugu dambeeyay ee xasilloon ee codsiyada, daalacashada iyo nidaamyada hawlgalka oo leh dhammaan cusbooneysiinta la heli karo iyo goobaha caadiga ah. Wadarta lacagta gunnada ah ee la bixiyay waxay ahayd US$1.155.000.
Pwn2Own Vancouver marka la gaaro 2022 waa socdaa, iyo 15 guurada tartanka ayaa horay loo arkay cilmi baaris cajiib ah oo la soo bandhigay. La soco baloogan si aad u hesho natiijooyinka la cusboonaysiiyay, sawirada, iyo fiidiyowyada dhacdada. Dhammaanteen waxaan ku dhejin doonaa halkan, oo ay ku jiraan Masterboard-kii ugu dambeeyay ee hoggaanka Pwn.
Tartan muujiyay shan isku day oo lagu guulaystay oo lagaga faa'iidaysanayay baylahda aan hore loo aqoon gudaha Ubuntu Desktop, oo ay sameeyeen kooxo kala duwan oo kaqeybgalayaal ah.
ayaa la guddoonsiiyay a $40,000 abaal-marin ah oo lagu muujinayo kobaca mudnaanta maxalliga ah ee Ubuntu Desktop adiga oo ka faa'iidaysanayna laba bakhaar oo buuxdhaafay iyo arrimo sii dayn laba jibaaran. Afar gunno, oo qiimihiisu yahay $40,000 midkiiba, ayaa lagu bixiyay muujinta mudnaanta mudnaanta iyadoo laga faa'ideysanayo dayacanka la xiriira gelitaanka xusuusta ka dib markii la sii daayay (Isticmaal-Bilaash ah).
GUUL - Keith Yeo (@kyeojy) wuxuu ku guuleystay $ 40K iyo 4 Master of Pwn dhibcood ka faa'iidaysiga bilaashka ah ee Ubuntu Desktop.
Qaybaha dhibaatada aan wali la soo sheegin, marka loo eego shuruudaha tartanka, macluumaad faahfaahsan oo ku saabsan dhammaan dayacanka 0-maalin ee la soo bandhigay ayaa la daabici doonaa oo keliya 90 maalmood ka dib, kuwaas oo loogu talagalay diyaarinta cusboonaysiinta by saarayaasha si meesha looga saaro dayacanka.
GUUL - Isku daygii ugu dambeeyay ee Maalinta 2, Zhenpeng Lin (@Markak_), Yueqi Chen (@Lewis_Chen_), iyo Xinyu Xing (@xingxinyu) oo ka socda kooxda TUTELARY ee Jaamacadda Waqooyi-galbeed ayaa si guul leh u soo bandhigay Isticmaalka Ka dib dhiqlaha bilaashka ah kaas oo horseeday sare u qaadista mudnaanta ee Ubuntu Desktop. Tani waxay kuu sahlaysaa $40,000 iyo 4 Master of Pwn dhibcood.
Kooxda Orca ee Badbaadada Badda (security.sea.com) waxay awooday inay ku shaqeeyaan 2 dhiqlaha Ubuntu Desktop: Qorista Ka Baxsan Xuduudaha (OOBW) iyo Isticmaalka-Bilaash ah (UAF), iyagoo helay $40,000 iyo 4 Master of Pwn Points .
GUUL: Kooxda Orca ee Badbaadada Badda (security.sea.com) waxay awooday inay ku shaqeeyaan 2 dhiqlaha Ubuntu Desktop: Ka-baxsan-Xuduudaha Qor (OOBW) iyo Isticmaal-ka-Free (UAF), isagoo ku guuleystay $40,000 iyo 4 Master of Pwn dhibcood.
Weerarada kale ee lagu guulaysan karo, waxaynu ka xusi karnaa kuwa soo socda:
- 100 kun oo doolar oo loogu talagalay horumarinta ka faa'iidaysiga Firefox, taas oo u oggolaatay, iyada oo la furayo bog si gaar ah loo qaabeeyey, si loo hareer maro go'doominta sanduuqa-cammuudda oo ay ku fuliyaan koodka nidaamka.
- $40,000 ee muujinta ka faa'iidaysiga ka faa'iidaysiga buuxdhaafka ah ee Oracle Virtualbox si looga saaro martida.
- $50,000 oo loogu talagalay socodsiinta Apple Safari (buuffer overflow).
- $450,000 oo loogu talagalay jabsiga Kooxaha Microsoft (kooxo kala duwan ayaa soo bandhigay saddex jabsi oo abaalmarin
- $150,000 midkiiba).
- $80,000 (laba $40,000 oo gunno ah) si looga faa'iidaysto qulqulka qulqulka iyo mudnaanta sare u kaca ee Microsoft Windows 11.
- $80,000 (laba $40,000 oo gunooyin ah) si aad uga faa'iidaysato cilad ku jirta koodhka xaqiijinta si kor loogu qaado mudnaantaada Microsoft Windows 11.
- $40k si aad uga faa'iidaysato qulqulka xad dhaafka ah si kor loogu qaado mudnaantaada Microsoft Windows 11.
- $40,000 oo loogu talagalay ka faa'iidaysiga dayacanka Isticmaalka-Bila'aanta ah ee Microsoft Windows 11.
- $75,000 oo loogu talagalay muujinta weerar lagu qaaday nidaamka macluumaadka ee gaadhiga Tesla Model 3. Ka faa'iidaysiga waxa loo adeegsaday bakhaar xad dhaaf ah iyo kutaanno lacag la'aan ah, oo ay la socoto farsamo bacaad lagu lisay oo hore loo yiqiin.
Ugu dambeyn, waxaa la xusay in labadii maalmood ee tartanka uu socday guul-darrooyinka dhacay inkastoo saddexda isku day ee la jabsaday la oggolaaday, ay yihiin kuwan soo socda: Microsoft Windows 11 (6 hacks guuleed iyo 1 guuldarro ah), Tesla (1 jabsi guul iyo 1 guuldarro ah). ) iyo Kooxaha Microsoft (3 jabsi oo guulaystay iyo 1 fashilmay). Ma jirin codsiyo lagu muujinayo ka faa'iidaysiga Google Chrome sanadkan.
Finalmente haddii aad xiisaynayso inaad waxbadan ka ogaato, Waxaad faahfaahinta ka hubin kartaa boostada asalka ah at xiriirka soo socda.