Gwangun Jung

Security Researcher.

Pwn2own Winner (Vancouver 2024)

[Gwangun Jung @pr0Ln]

Congratulations!

[TrendAI Zero Day Initiative @thezdi]

Another collision! @fluorite_pwn, @YunjeShin, @yskm_Gunter, @Mafty5275, @clay419, @vvsy46, and @won6_choi of BoB::Takedown targeted the Grizzl-E Smart 40A, hitting one collision and one unique 0-day, earning $15,000 USD and 3 Master of Pwn points. #Pwn2Own #P2OAuto

[TrendAI Zero Day Initiative @thezdi]

Another collision! @fluorite_pwn, @YunjeShin, @yskm_Gunter, @Mafty5275, @clay419, @vvsy46, and @won6_choi of BoB::Takedown targeted the Grizzl-E Smart 40A, hitting one collision and one unique 0-day, earning $15,000 USD and 3 Master of Pwn points. #Pwn2Own #P2OAuto

[Gwangun Jung @pr0Ln]

Congregation! They are our mentees who studied in the 13th BoB (Best of Best) offered by Kitri of Korea.

[TrendAI Zero Day Initiative @thezdi]

Confirmed! Their enthusiasm was rewarded as they used an integer overflow to escape #Oracle VirtualBox and execute code on the underlying OS. They earn $40,000 and 4 Master of Pwn points. #Pwn2Own #P2OBerlin

[Gwangun Jung @pr0Ln]

They are my mentees who studied in the BoB (Best of Best) 13th education program offered by Kitri of Korea.

[Gwangun Jung @pr0Ln]

@thezdi @d4m0n_8 🎊 congratulations !!

[Gwangun Jung @pr0Ln]

오 1일차 2등 ㅋㅋ

[TrendAI Zero Day Initiative @thezdi]

And that bring Day One of #Pwn2Own Berlin to a close. We awarded $260,000 today, but more great research is yet to come. STAR Labs has an early lead on Master of Pwn, but it's anyone's game at this point. Stay tuned for more results as we go.

[Gwangun Jung @pr0Ln]

Congratulations, my coworkers!

[TrendAI Zero Day Initiative @thezdi]

We have another collision. Hyunwoo Kim (@V4bel) and Wongi Lee (@_qwerty_po) of Theori were able to escalate to root on Red Hat Linux with an info leak and a UAF, but one of the bugs used was an N-day. They still win $15,000 and 1.5 Master of Pwn points. #Pwn2Own

[Gwangun Jung @pr0Ln]

@J_kangel Wow! Congratulations!

[Hexacon @hexacon_fr]

Utilizing Cross-CPU Allocation to Exploit Preempt-Disabled Linux Kernel by Mingi Cho & Wongi Lee

#HEXACON2024

[Gwangun Jung @pr0Ln]

Thank you for listening to our presentation.

If you have any questions, please DM(or email) me or @bbbig12.

[Hexacon @hexacon_fr]

Guest Revolution: Our Story of Compromising the Host Kernel from the VMware Guest by @bbbig12 & @pr0Ln

#HEXACON2024

[Gwangun Jung @pr0Ln]

Thanks for awesome gifts.
@hexacon_fr

[Gwangun Jung @pr0Ln]

Now, We are in Paris.

[Gwangun Jung @pr0Ln]

Our CFP was accepted by hexacon.
See you in Paris!
#hexacon

[TrendAI Zero Day Initiative @thezdi]

During #Pwn2Own Automotive, the team from @Synacktiv used 2 bugs to take over the #Autel Maxicharger. Our latest blog takes a brief look at how they did it, and how Autel patched it.
https://t.co/PkkX4xtQ89

[Alan Sguigna @AlanSguigna]

Debugging Hyper-V:
1. Halt in hvix64.
2. Set VM Resume breakpoint.
3. Turn on Intel Processor Trace.
4. Break in the Secure Kernel.
Record all Intel PT executed instructions by reading Host mode memory from within Guest mode.
Hopefully cool video for hypervisor enthusiasts.

[Gwangun Jung @pr0Ln]

@_qwerty_po Please buy and bring a new bug for me as a present when you return.😉

[The Haag™ @M_haggis]

🚨 solid writeup on CVE-2024-21338! Learn how a clever AppLocker driver exploit bypasses SMEP & kCFG. Two paths to SYSTEM access revealed. Worthy read! Great work by @crowdfense

https://t.co/6d8Ilyc5V0

[0xor0ne @0xor0ne]

Very interesting series on dynamically hooking Golang programs

Part 1: https://t.co/RYjBvVHQi9
Part 2: https://t.co/gzuyIThaNW

Credits Mihail Kirov and Damien Aumaître (@quarkslab)

#infosec

[Gwangun Jung @pr0Ln]

@_qwerty_po Just joke 😃
Congratulations again!

[Gwangun Jung @pr0Ln]

@_qwerty_po Great! The seat next to me is always empty. See you on Monday!