Pwnie Awards 2017

The 2019 Pwnie Award For Most Under-Hyped Research

Thrangrycat

Jatin Kataria and Red Balloon Security

Let’s address the elephant in the room: this is the first and only vulnerability whose name is written with emojis.

The vulnerability itself affects Cisco devices and provides a bypass to their secure boot mechanism.

The bugchain allowed you to own Cisco Routers. Part of the fun here is modifying the FPGA anchor bitstream, which lives in an unprotected flash RAM, as you would expect.