2016 Pwnie Award Winners

Best Backdoor

Juniper ScreenOS: 哈哈哈哈哈哈 (CVE-2015-7755 & CVE-2015-7756)

Best Branding

Mousejack wireless keystroke injection bug

Best Client-Side Bug

glibc getaddrinfo stack-based buffer overflow (CVE-2015-7547)

Best Cryptographic Attack

SSLv2 Crypto attack (CVE-2016-0800)

Best Junk or Stunt Hack

Remotely Killing a Jeep on the Highway

Best Privilege Escalation Bug

Widevine QSEE TrustZone Privilege Escalation (CVE-2015-6639)

Best Server-Side Bug

Cisco ASA IKEv1/IKEv2 Fragmentation Heap Buffer Overflow (CVE-2016-1287)

Best Song

“Cyberlier”

Epic 0wnage

The Juniper Backdoor

Epic Achievement

Never Giving Up and Never Letting Us Down (CVE-2000-A-BUNCH-OF-THEM)

Lamest Vendor Response

“WD MyPassword Drive”

Lifetime Achievement Award

Mudge

Most Innovative Research

Dedup Est Machina: Memory Deduplication as an Advanced Exploitation Vector

Most Over-Hyped Bug

Badlock (CVE-2016-0128)