Episode

EP 82 — Master of Pwn

05 January 2021 Official episode · Official transcript

cons

The episode covers the Zero Day Initiative, the history and operation of Pwn2Own, exploit research demonstrated at the contest, and the 2020 Masters of Pwn winners Team Flashback.

Topics: Zero-day vulnerability acquisition and disclosure, Bug-bounty programs and vulnerability brokerage, Pwn2Own exploit competition and Masters of Pwn scoring, Browser exploitation, Use-after-free vulnerabilities, Browser sandbox escapes, Undocumented operating-system features, Exploit chains, Virtualization and hypervisor escapes, Kernel and VGA-driver exploitation, Baseband exploitation, Remote code execution, Crafted-packet router exploitation, Persistent backdoors surviving factory reset, Ethics and markets for offensive zero-day exploits, Industrial control systems and SCADA security

Official episode-page sources

Links published on the Darknet Diaries episode page. Not LLM output.

Entities (52)

Claims (23)

Qualified statements from this episode, not graph facts.

Pedro MEMBER_OF Team Flashback

Pedro and Radek are known together as Team Flashback.

Explicit Confidence 99% · Jack Rhysider EP 82 Details

“Together, they’re known as Team Flashback.”

Jack Rhysider · offsets 48411–48453

Radek MEMBER_OF Team Flashback

Radek and Pedro are known together as Team Flashback.

Explicit Confidence 99% · Jack Rhysider EP 82 Details

“Together, they’re known as Team Flashback.”

Jack Rhysider · offsets 48411–48453

Team Flashback OTHER Master of Pwn

Team Flashback won the Masters of Pwn in November 2020.

Explicit Confidence 99% · Jack Rhysider EP 82 Details

“In the November 2020 Pwn2Own, they won Masters of Pwn.”

Jack Rhysider · offsets 57987–58041

Zero Day Initiative OPERATED_BY Trend Micro

ZDI is run by Trend Micro.

Explicit Confidence 99% · Jack Rhysider EP 82 Details

“ZDI is ran by Trend Micro”

Jack Rhysider · offsets 3011–3036

Zero Day Initiative ASSOCIATED_WITH TippingPoint Intrusion Detection System

ZDI was created to enrich the vulnerabilities detectable by Trend Micro’s TippingPoint intrusion detection system.

Explicit Confidence 95% · Jack Rhysider EP 82 Details

“ZDI was created in order to enrich the vulnerabilities that their intrusion detection system can detect.”

Jack Rhysider · offsets 3365–3469

Zero Day Initiative ASSOCIATED_WITH zero-day vulnerability

ZDI buys zero-day vulnerabilities from researchers.

Explicit Confidence 99% · Jack Rhysider EP 82 Details

“Specifically, they buy zero-day vulnerabilities.”

Jack Rhysider · offsets 2514–2562

Pwn2Own PART_OF CanSecWest

Pwn2Own has been held annually at CanSecWest since 2007.

Explicit Confidence 99% · Jack Rhysider EP 82 Details

“Since 2007, the Pwn2Own contest has been going on every year at CanSecWest.”

Jack Rhysider · offsets 9068–9143

use-after-free AFFECTS Google Chrome

Vupen’s Chrome exploit chain used a use-after-free in Google’s renderer process.

Explicit Confidence 98% · Brian Gorenc EP 82 Details

“they’re exploiting a use-after-free in Google’s renderer process.”

Brian Gorenc · offsets 11795–11860

zero-day vulnerability AFFECTS QuickTime

Dino Dai Zovi reportedly used a bug in QuickTime to take over the MacBook Air during the early contest.

Uncertain Confidence 82% · Dustin Childs EP 82 Details

“I believe he used a bug in QuickTime to take over the system.”

Dustin Childs · offsets 8905–8966

Vupen OTHER Google Chrome

Vupen demonstrated an exploit chain against Google Chrome at Pwn2Own in 2014.

Explicit Confidence 98% · Brian Gorenc EP 82 Details

“Vupen was – at the contest was targeting Google Chrome.”

Brian Gorenc · offsets 11387–11442

Vupen ASSOCIATED_WITH Zerodium

Jack says Vupen later morphed into Zerodium, which continued acquiring zero-day exploits.

Uncertain Confidence 90% · Jack Rhysider EP 82 Details

“that team has now morphed into what’s called Zerodium”

Jack Rhysider · offsets 21864–21917

Project Raven USES Karma

Project Raven operatives used the Karma exploit to access information on a target’s iPhone without requiring a click.

Explicit Confidence 98% · Jack Rhysider EP 82 Details

“One of the hacking tools they used is called Karma.”

Jack Rhysider · offsets 20132–20183

“This allowed Project Raven operatives to access information on a target’s iPhone without the target having to click or do anything.”

Jack Rhysider · offsets 20185–20316

Project Raven ASSOCIATED_WITH United Arab Emirates

Project Raven was described as a hacking group contracted by the UAE to hack its adversaries; the link is presented as a contractual association rather than direct operational control.

Explicit Confidence 97% · Jack Rhysider EP 82 Details

“This was basically a hacking group who was contracted by the UAE to hack into its adversaries.”

Jack Rhysider · offsets 20036–20130

Junghoon Lee ASSOCIATED_WITH Google Chrome

Forbes reportedly described Junghoon Lee, also known as Lokihardt, as able to hack Google Chrome.

Attributed Confidence 90% · Jack Rhysider EP 82 Details

“Lee, better known as his online alias Lokihardt is said to be able to hack into any computer, smart phone, program, or browser from Apple iPhone to Microsoft Edge, Google Chrome, or Safari.”

Jack Rhysider · offsets 22716–22905

Junghoon Lee ASSOCIATED_WITH Microsoft Edge

Forbes reportedly described Junghoon Lee, also known as Lokihardt, as able to hack Microsoft Edge.

Attributed Confidence 90% · Jack Rhysider EP 82 Details

“Lokihardt is said to be able to hack into any computer, smart phone, program, or browser from Apple iPhone to Microsoft Edge”

Jack Rhysider · offsets 22754–22878

Junghoon Lee ASSOCIATED_WITH Safari

Forbes reportedly described Junghoon Lee, also known as Lokihardt, as able to hack Safari.

Attributed Confidence 90% · Jack Rhysider EP 82 Details

“Google Chrome, or Safari.””

Jack Rhysider · offsets 22880–22906

Richard Zhu MEMBER_OF Fluoroacetate

Richard Zhu is one of the two members of Team Fluoroacetate.

Explicit Confidence 99% · Jack Rhysider EP 82 Details

“It’s made up of two people, Richard Zhu and Amat Cama.”

Jack Rhysider · offsets 38470–38524

Amat Cama MEMBER_OF Fluoroacetate

Amat Cama is one of the two members of Team Fluoroacetate.

Explicit Confidence 99% · Jack Rhysider EP 82 Details

“It’s made up of two people, Richard Zhu and Amat Cama.”

Jack Rhysider · offsets 38470–38524

Fluoroacetate OTHER Tesla Model 3

Team Fluoroacetate exploited a Tesla Model 3’s browser session and won a Tesla Model 3 at Pwn2Own.

Explicit Confidence 99% · Jack Rhysider EP 82 Details

“they were able to exploit that session and take over the Tesla.”

Jack Rhysider · offsets 45867–45930

“That was enough for them to win a Tesla Model 3.”

Dustin Childs · offsets 45939–45987

Fluoroacetate OTHER baseband

Amat Cama’s specialty within Team Fluoroacetate was baseband exploitation.

Explicit Confidence 99% · Brian Gorenc EP 82 Details

“Amat’s specialty was actually – was baseband exploitation.”

Brian Gorenc · offsets 40176–40234

Fluoroacetate OTHER Samsung Galaxy

The Samsung Galaxy was exploited via baseband in Pwn2Own for three consecutive years from 2017 to 2019, in connection with Amat’s research.

Explicit Confidence 93% · Brian Gorenc EP 82 Details

“From 2017 to 2019, the Samsung Galaxy was part of the contest and it was actually exploited via baseband three years in a row.”

Brian Gorenc · offsets 41951–42077

Team Flashback OTHER remote code execution

Team Flashback brought working zero-day exploits capable of remote code execution to Pwn2Own events.

Explicit Confidence 95% · Jack Rhysider EP 82 Details

“Together, Team Flashback has brought eleven working zero-day exploits to three different Pwn2Own events”

Jack Rhysider · offsets 57839–57942

Team Flashback ASSOCIATED_WITH persistent backdoor

Radek said two of Team Flashback’s router exploits delivered persistent backdoors that survived a factory reset; this is reported as the team’s account.

Explicit Confidence 98% · Radek EP 82 Details

“two of our exploits were delivering a persistent back door. Once you exploit it, the user is not even aware of the exploit being planted”

Radek · offsets 56228–56365

Transcript references

Works mentioned in the transcript. Distinct from show-note sources.

Extraction provenance

Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-12T17:33:43.387094+00:00