2017 Pwnie Award Nominees
Best Backdoor
SUN8I_ROOT_DEVICE / rootmydevice
Best Branding
Best Client-Side Bug
Compromising Linux using SNES Sony SPC700 Processor Opcodes
One Byte Overflow and Symlinks
Project Zero vs Malware Protection Service
Best Cryptographic Attack
Critical vulnerability in JSON Web Encryption
Flip Feng Shui: Hammering a Needle in the Software Stack
The first collision for full SHA-1
Best Privilege Escalation Bug
Drammer: Deterministic Rowhammer Attacks on Mobile Platforms
task_t considered harmful – many XNU EoPs
x86: broken check in memory_exchange() permits PV guest breakout
xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window
Best Server-Side Bug
Best Song
If you like hacking Pineapples