POC2023 Archive

01

Talks

16 presentations

10 years of Windows Privilege Escalation with Potatoes		Antonio CocomazziSentinelOne
Modern Chrome Exploit Development		Avboy1337, yyjb, vrkNumenCyber
One shot, Triple kill: Pwning all three Google kernelCTF instances with a single 1-day Linux vulnerability		Dongok Kim, SeungHyun Lee, Insu YunKAIST Hacking Lab
Linux user namespaces: a blessing and a curse		Ignat KorchaginCloudflare
Building More Windows RPC Tooling for Security Research		James ForshawGoogle Project Zero
MTE as Tested		Mark BrandGoogle Project Zero
Navigating the Light and Darkness in the World of Vulnerabilities		MJ0011Cyber Kunlun
Fuzzing as Reinforcement Learning		Ned WilliamsonGoogle Project Zero
Evolution of Safari mitigations and bypasses in 2022		Nikita Pupyshev
Tracking APTs through Advanced SIGINT techniques		Ryan Sherstobitoff
Exploiting null-derefs: Doing the impossible in the Linux kernel		Seth JenkinsGoogle Project Zero
OLE object are still dangerous today — Exploiting Microsoft Office		wh1tc, Zhiniang PengSangfor
A roadmap to $50,000 at Pwn2Own Vehicle 2024: Dissecting QNX, and exploiting its vulnerabilities		Yingjie Cao, Zhe Jing
Simple bug but not easy exploit: Rooting Android devices in one shot		Yong WangAlibaba Cloud
Bug Hunting and Exploiting in Microsoft's Message Queuing (MSMQ) Components		Yuki Chen, Qibo Shi(k0shl), Azure YangCyber Kunlun
Attack Move Verifiers: Our Experiences of Exploiting and Enhancing Move-based Blockchain		Zhaofeng ChenCertiK

02

Training

2 courses

Mobile Security Masterclass: Platform Internals and InSecurity		Prateek Gianchandani & Dinesh8ksec
Black Belt Pentesting / Bug Hunting Millionaire: Mastering Web Attacks with Full-Stack Exploitation		Dawid CzaganSilesia Security Lab

03

Events

1 event

04

Sponsors