THE JUNKYARD

An End-Of-Life Pwnathon
February 21-22, 2025

CONGRATULATIONS TO THE WINNERS OF
THE JUNKYARD EOL PwNATHON 2025!

❗ Most Impactful System ❗

- Winner: Grand Central Hack the Planet - Lemon, Red Threat (bypassing authentication prompts on an Intelight X-1 traffic control system) 🚦

- Runner Up: Securely Insecure VPN - SeongJoon Cho and Donghyeon Oh, SSD Labs (exposing security flaws in the D-Link DSR-250 VPN Router) 🌐

🤡 Best Meme Target 🤡

- Winner: Final Audition - Yltsi (manipulating operator menu settings on a Pump It Up XX: 20th Anniversary Dance Machine) 🕺

- Runner Up: ClickShock - Maxpl0it, Interrupt Labs (demo-ing a 1-Click RCE (XSS + Auth RCE) in mFi mPower Pro WiFi-Enabled Power Extender) 🔌


😈 Most Innovative Exploitation Technique 😈

- Winner: Just Another Conventional Exploit - Anna Staats, DC Road Runners Club (JACE-600E compact embedded controller/server platform) 🔋

- Runner Up: Cloudy Wrench - Alan Cao and William Tan, Trail of Bits (uncovering legacy vulnerabilities in a Netgear WGR614) 🛜

SCHEDULE

Thanks to our JUNKYARD SPONSORS!

Interested?