Wonbeen Im

Security Researcher

[TrendAI Zero Day Initiative @thezdi]

Confirmed! @petoworks targeted the Grizzl-E Smart 40A, exploiting one buffer overflow bug, and earned $10,000 USD and 4 Master of Pwn points. #Pwn2Own #P2OAuto

[TrendAI Zero Day Initiative @thezdi]

Another collision! @petoworks targeted the Kenwood DNR1007XR, hitting one bug collision earning $2,500 USD and 1 Master of Pwn point. #Pwn2Own #P2OAuto

[TrendAI Zero Day Initiative @thezdi]

Confirmed! PetoWorks (@petoworks) chained three bugs - including Denial of Service (DoS), a race condition, and command injection - against the Phoenix Contact CHARX SEC-3150, winning Round 1 for $50,000 USD and 5 Master of Pwn points with the signal manipulation add-on. #Pwn2Own #P2OAuto

[Wonbeen Im @D0b6y]

@shift_crops @petoworks @howrealsung @ju_cheda @d0now_kim Thank you so much for your congratulations.
Congratulations as well on your success!
It was really nice to meet you in Tokyo this time.
I hope we get the chance to meet again in next P2O :)

[Wonbeen Im @D0b6y]

@J4ck3LSyN @petoworks Thank you for your interest.
The write-up will be shared via @petoworks after the vulnerabilities have been disclosed 🙂

[PetoWorks @petoworks]

We're on-site for #Pwn2Own Tokyo! @D0b6y and @howrealsung are ready to demonstrate 4 entries :) Come say hello! GL&HF everyone!

[TrendAI Zero Day Initiative @thezdi]

Confirmed! Team PetoWorks used a Release of Invalid Pointer or Reference bug to exploit the Canon printer at #Pwn2Own. They $10,000 and 2 Master of Pwn points for their 3rd round win. #P2OIreland

[PetoWorks @petoworks]

Getting ready for #Pwn2Own 2025 Ireland 🇮🇪
🤞
@howrealsung @D0b6y

[st4rlight @st4rlight_exp]

Got the special award for HackTheDrone 2024 Finals! w/ @D0b6y @howrealsung @nang__lam

[Wonbeen Im @D0b6y]

It was such a fun Pwn2Own! I want to thank the @stealien team for all our achievements.
Also, thanks to @thezdi for organizing such an enjoyable event.
I hope to see you all next year!

[TrendAI Zero Day Initiative @thezdi]

Our first collision of Day Three: the group from STEALIEN Inc. successfully popped the Lorex camera, but the bug they used had already been demonstrated in the contest. They still earn $3,750 and 1.5 Master of Pwn points. #Pwn2Own #P2OIreland

[Wonbeen Im @D0b6y]

First success at Pwn2Own 2024!

[TrendAI Zero Day Initiative @thezdi]

Confirmed! The STEALIEN Inc. team used a combination of bugs in their attack chain to exploit the #Ubiquity AI Bullet and flash the lights (plus get a root shell). Their work earns them $30,000 and 3 Master of Pwn points. #Pwn2Own #P2OIreland

[Wonbeen Im @D0b6y]

@kiddo_pwn 다음 p2o엔 같이오시죠

[Wonbeen Im @D0b6y]

@boredpentester Congrats!

[kiddo @kiddo_pwn]

@d0now_kim @D0b6y Just arrived in Cork city! We’ve been on the plane for 15+ hours with @D0b6y. Let’s goooooo🇮🇪🍀

[TrendAI Zero Day Initiative @thezdi]

Success! STEALIEN executed a stack-based buffer overflow attack against the Wyze Cam v3 resulting in a root shell. They earn $15,000 and 3 Master of Pwn Points. #Pwn2Own