GeekPwn, the best platform for security geeks
In order to follow the fast developing techniques, we hold GeekPwn Macau contest on May 12th. Macau contest is more International and has same level of award as GeekPwn Carnival contest. On Oct. 24th, except the main venue in Shanghai, GeekPwn will have its second venue place in Silicon Valey, US. This year, we will give more hornor to winners, except awards and chances to enter GeekPwn Hall of Fame, GeekPwn will give several annual best awards to extraordinary security geeks.
- 2016
-
January 20th, 2016
GeekPwn 2016 Macau Contest starts call for pwn
-
April 20th, 2016
GeekPwn 2016 Macau Contest finishes call for pwn
-
May 12th, 2016
GeekPwn 2016 Macau Contest
On 5.12, GeekPwn Contestants show their power in Macau -
June 20th, 2016
GeekPwn Carnival Call for Pwn Starts
-
October 10th, 2016
GeekPwn Carnival Call for Pwn ends
-
October 24th, 2016
GeekPwn Carnival
GeekPwn 2016 Carnival Contest Rules
Date: Oct. 24th, 2016 Initial Prize PoolRMB 5 Million
GeekPwn always follows the leading technique trends. GeekPwn 2016 Macau Contest will still focus on Smart Life. The Award standards are same to GeekPwn 2016 Carnival.
To make the contest reveal actual impacts to Smart Life, GeekPwn 2016 will take technical difficulty, impact, attack motivation and demo effect into account when judges decide the award. ()
Yu Yang(Chief Judge)
Yu Yang, known as Tombkeeper or TK, is one of the three winners worldwide of Microsoft security bounty program with 100 thousand USD for his research findings of mitigation bypass techniques. He is a veteran with rich experience in security research field and has abundant research results on vulnerabilities, malware etc. In addition, he independently found the techniques to break iPhone fingerprint identification mechanism and crack wireless RFID communication etc. He has great fame in security community with his high-quality presentations in CanSecWest, HITCon, XCon and many other security conferences. Now, he is head of Tencent XuanWu Security Research Lab.
Wei Tao(Judge)
Dr. Wei Tao is the leader of Baidu Security Lab, and was Associate Professor of Beijing University. He is a Co-organizer of BitBlaze, well known security team in UC Berkeley. He is also a Co-founder of MITBBS. He has made great acheivements in both security academy and industry. He is now the leader of Baidu security lab, including sites of Beijing and San Francisco Bay Area. The lab is providing advanced security technology and ability to Baidu business.
Wan Tao(Judge)
Wan Tao is a co-founder of IDF lab. He started to learn the technology of computer virus by himself since 1992. He has experienced and witnessed the development and evolvement course of China’s internet security and hacker industry. He worked for PwC, CAJinchen and IBM, and transformed from a financial auditor to a security architect of cloud computing. He delivered numbers of speeches on security conferences at home and abroad, such as Phdays in Russia, POC in South Korea, Hitcon in Taiwan. He is a man of wide interests. Currently he focuses in the researches and practices of threats information analysis, security of mobile internet and smart devices, photovoltaic station for home use and digital radio. He dedicated his spare time to technique commonweal. He contributed to establish 404 commonweal and Yiyun map for disaster relief, devoted to strike at abducting in children and disaster relief with technology, thereby being awarded top 10 annual charitarian by CCTV.
Xu Hao(Judge)
Xu Hao, known as Windknown, key security researcher of Pangu Team, which is the first China team to accomplish iOS Jailbreak. His current focus is on OSX/iOS system security and application development. He also has rich research experience on Windows system security, including vulnerability, rootkit and virtualization. He has the fame in security community with high-quality presentations in XCon, POC, Syscan, Syscan360 and many other security conferences.
Zhuge Jianwei(Judge)
Dr. Zhuge Jianwei, is the Research Fellow of Network Science and Network Space Research Institute, and Network and Information Security Lab, Tsinghua University. He is the top lecturer and researcher on network and system security area, and supports the CCERT operations. He is also the leader of Blue Lotus CTF team (Tsinghua University), which entered DefCon CTF Finals for several times. The team is the first China team to enter CTF Finals.
Wang Yu(Judge)
Wang Yu loves everything regarding OS kernel, from the implementation of kernel architecture, driver programming, rootkit/anti-rootkit to hunting and exploiting of vulnerabilities, Android root. Currently, he’s working for a well known internet security company, engaged in the research of vulnerabilities and APT recognition. He delivered speeches on the conferences such as SysCan360 2012/2013, Hitcon 2013, Black Hat USA 2014.
Yuan Renguang(Counsellor)
Mr. Yuan is the Director of Tencent ZhanLu Lab. He is a well-known guru-level representative of network security researchers and white-hat hackers in China. He was the first researcher in China who analyzed Windows system-level codes and found Windows 9X 'Share Level Password' vulnerability, IIS Unicode vulnerabilities.
Du Yuejin(Counsellor)
Dr. Du is the Vice President of Security Department of Alibaba Group. With over 15 years working experiences in network security, he has built up the network security emergency response team of China. He was the director of National Engineering Lab for Cyber Security Emergency Response Technology of China and National Cyber Security Technology Research Institute of China, and Vice President of APCERT (Asia-Pacific Computer Emergency Response Team ). He is also a part-time professor and tutor of Ph.D. students in several Universities. He has won first prize of National Science and Technology Progress Award of China, ISC2 Information Technology Expert Award, etc.
Wang Qi(Organizer)
DaNiuWa, initializer and organizer of GeekPwn, founder and CEO of KEEN. He was the first principle security researcher of Microsoft Asia Pacific, and co-founder of China Microsoft Security Response Center (MSRC) which is the the first regional MSRC out of Microsoft headquarter.
Judging | Restrictions & Notifications
1. The Pwn target devices will be installed with stock ROM/applications with default configurations. If ROM is upgradable, the device will be installed with the latest version publicly available 30 days before the contest.
2. All the technical approaches must be contestant’s original work. All the public known PWN approaches could not be used and win the contest. Winners need to submit technical details to judge committee before getting the reward prize.
3. If more than one contestant registers in a given device category, the order of the contestants will be based on the registration time. If more than one contestant successfully demonstrates the PWN in a given device category, judge committee will verify whether the technical approach is same or not. For winners with same approach, only first winner will win prize. For winners with different approach, the one who made the Pwn in the shortest time will win half of the prize and the others share the other half of the prize equally.
4. GeekPwn judge committee will provide additional prize to contestant according to the novel level and difficult level of the technical approaches.
5. For the devices and technical approach which are not covered by the current categories and rules, GeekPwn judge committee will define additional rules accordingly.
6. GeekPwn judge committee reserves the right of final interpretation of contest rules.
1. GeekPwn organizing committee (“the committee” in below description) recognizes the technical capability of the winner individually, but doesn’t acknowledge that it has linkage to winner’s working organization.
2. The committee doesn’t acknowledge the contest result directly reflect the security level of the smart devices.
3. The committee restrictedly follows the responsible disclosure to device manufactures. All the details of Pwn technical approaches will be disclosed to the representatives from the according device manufactures privately by committee and contestant. If no representatives from the manufacture is at the scene, all the information will be disclosed to manufactures offline after the contest. The committee and contestant commit not to disclose any details to third-party before manufactures fix the issues.
4. The committee commits that foreign judges will only participate the judgment of devices categories of foreign manufactures.
5. The committee guarantees that contestant’s private personal information will not be disclosed to third-party or used for commercial activities without contestant agreement and authentication.
