SpeedPwning VMware Workstation

By Corentin BAYET and Bruno PUJOS

Description

In this talk at Ekoparty 2020, Corentin BAYET and Bruno PUJOS share their journey in reversing and hunting for vulnerabilities in VMware Workstation for Pwn2Own in only 2 months.

This ended with a race against time by writing a VM escape exploit in less than 10 days with one vulnerability that didn’t provide much primitives.