82: Master of Pwn
Topics covered
Popular Clips
Episode Highlights
Contest Evolution
The PWN to Own contest, initiated by the Zero Day Initiative, has evolved into a prestigious event where hackers demonstrate their prowess by exploiting vulnerabilities in software like browsers and operating systems. Initially focused on web browsers, the contest now includes a wide range of categories, attracting elite teams from around the world. notes the intense competition, especially between teams like Tencent and 360, who strive to exploit every category and win the coveted Master of PWN title 1.
The contest requires that exploit work without any user interaction.
---
The event has seen remarkable exploits, such as George Hotz's multiple victories and the innovative techniques employed by teams like floracitate 2.
Masters of PWN
Team Flashback, consisting of and , emerged as the Masters of PWN in 2020, showcasing their exceptional hacking skills. Despite the contest's lack of visual spectacle, the excitement lies in the intricate exploits and the prestige of being recognized as top-tier hackers. highlights their journey, noting their motivation for respect rather than monetary gain 3.
It's a place to demonstrate that you're one of the top tier hackers in the world.
---
Their achievements include bringing eleven zero-day exploits to various PWN to Own events, earning significant prize money and respect from their peers 4.
Ethical Hacking
The ethical considerations and motivations behind participating in PWN to Own are complex. While financial rewards are substantial, many hackers, like Team Flashback, prioritize respect and recognition over monetary gain. They choose to participate in the contest rather than selling exploits on the gray market, valuing the prestige of being crowned Masters of PWN 5.
Our motivation is not money. We could make a lot more selling this in the gray market.
---
The contest also provides a platform for ethical hacking, allowing participants to demonstrate their skills while contributing to software security by exposing vulnerabilities 6.