Pwn2Own Toronto 2023: Part 3 – Exploration

In this third part of the series, we focus on the exposed web services running on TCP ports 80 and 443.

Since a valid exploit chain must achieve code execution without prior authentication, we focus on the available functionality that can be accessed without authentication.

authentication can code code execution exploit exploit chain exposed focus internet of things ports pwn2own pwn2own toronto 2023 research running series services tcp third toronto valid web web services write-up