Pwnie Awards 2016

on YouTube ↗50m

" summary

A rapid awards rundown of real exploits and responses: Cisco ASA heap exploit wins for a multi-stage heap/info‑leak/heap‑manipulation chain; ImageMagick and Java deserialization show file‑upload → remote code exec; Android Stagefright hits “a whole ton” of devices via multimedia parsing; Silverlight and FreeBSD/AMD bugs give local/root escalation paths; cryptanalysis papers break real protocols; vendor failures include Western Digital credential leakage and an unclaimed Juniper backdoor; several research projects produced working demos, worms or practical forgeries that actually impacted deployed systems.

AI-written summary · about

" chapters (12)

1. 0:00Intro
2. 0:38PWNIE AWARD JUDGES
3. 3:09BEST SERVER-SIDE BUG
4. 10:07PWNIE FOR BEST PRIVILEGE ESCALATION BUG
5. 12:30CRYPTOGRAPHIC ATTACK
6. 15:34NOMINEES FOR BEST BACKDOOR
7. 17:48NOMINEES FOR BEST BRANDING
8. 23:33INNOVATIVE RESEARCH
9. 26:43LAMEST VENDOR RESPONSE
10. 30:02MOST OVERHYPED BUG
11. 36:15EPIC OWNAGE
12. 43:39NOMINEES FOR LIFETIME ACHIEVEMENT

" related talks

• 43mPWNIE Awards at Black Hat USA 2014Adi Shamir, Eran Tromer, James Forshaw, Ralf-Philipp Weinmann, Daniel Genkin, Yuny Bulygin, Andrea Bittau · Black Hat USA 2014
• 55mHow hacking worksEspen Sande-Larsen · NDC Security 2023
• 01h 06mHow hacking worksEspen Sande-Larsen · NDC TechTown 2023
• 46mLive hacking: Breaking into your Java web appBrian Vermeer · Devoxx Belgium 2019
• 41mThinking Outside the Sandbox - Violating Trust Boundaries in Uncommon WaysBrian Gorenc, Jasiel Spelman · Black Hat USA 2014
• 45mThe Top 10 Web Hacks of 2014Matt Johansen, Johnathan Kuskos · OWASP AppSec Research (AppSecEU) 2015
• 01h 16mClassic VulnerabilitiesPatricia Aas · ACCU 2022
• 52mDevSecOpsBrian Vermeer · Devnexus 2022