Pwn2Own 2018 – Day Two Schedule

March 15, 2018 | Dustin Childs

Welcome back to the second and final day of this year’s contest. We have three competitors scheduled for today targeting Mozilla FireFox and Apple Safari. Yesterday saw $162,000 USD awarded, and $170,000 is up for grabs today.

The full schedule for Day Two is below (all times PDT). We will update this schedule with results as they become available.

 Day Two – March 15, 2018

1000 – Richard Zhu (fluorescence) targeting Mozilla Firefox with a Windows kernel EoP

Success: Richard used an Out-of-Bounds (OOB) write in the browser followed by an integer overflow in the Windows kernel to earn himself another $50,000 and 5 more Master of Pwn points.

1200 – Markus Gaasedelen, Nick Burnett, Patrick Biernat of Ret2 Systems, Inc. targeting Apple Safari with a macOS kernel EoP

Failure: The contestant could not get his exploit working within the time allotted.

1400 – MWR Labs - Alex Plaskett (AlaxJPlaskett), Georgi Geshev (munmap), Fabi Beterke (pwnfl4k3s) targeting Apple Safari with a sandbox escape

Success: The team used two vulnerabilities to exploit Safari and escape the sandbox. They earned themselves $55,000 and 5 Master of Pwn points.

As always, we’ll provide updates here throughout the day and recap the day’s events in a separate blog. You can also find the latest results by following our Twitter feed. Best of luck to all of our contestants!