Pwn2Own Vancouver 2023

2nd Place
Billy Jheng Bing-JhongNguyễn Hoàng ThạchNguyễn Tiền Giang

Pwn2Own is a computer hacking contest held annually by Trend Micro’s Zero Day Initiative - ZDI. Contestants are challenged to exploit widely used software and mobile devices with previously unknown vulnerabilities. Winners of the contest receive the device that they exploited and a cash prize. The total prize for each contest is up to millions of dollars.

The 2023 spring edition of Pwn2Own (Pwn2Own Vancouver) was held from 23rd March to 25th March 2023 in a hybrid format where participants are back to competing in-person and in virtual.

Today, we are proud to announce that our researchers have managed to be 2nd place overall.

Pwn2Own Vancouver 2023 — final leaderboard

Nguyễn Tiền Giang has successfully Pwned the Microsoft Sharepoint in the Server Category.

Pwn2Own Vancouver 2023 — SharePoint exploit

Pwn2Own Vancouver 2023 — SharePoint confirmation

Billy Jheng Bing-Jhong, has successfully Pwned the Ubuntu OS in the Local Escalation of Privilege Category.

Pwn2Own Vancouver 2023 — Ubuntu LPE exploit

Pwn2Own Vancouver 2023 — Ubuntu LPE confirmation

Nguyễn Hoàng Thạch has successfully Pwned the VMware Workstation in the Virtualization Category.

Pwn2Own Vancouver 2023 — VMware Workstation exploit

Pwn2Own Vancouver 2023 — VMware Workstation confirmation

References