Overclock.net › Forums › Industry News › Software News › [Zerodium] ZERODIUM's Million Dollar iOS 9 Bug Bounty
New Posts  All Forums:Forum Nav:

[Zerodium] ZERODIUM's Million Dollar iOS 9 Bug Bounty

post #1 of 10
Thread Starter 
Source
Quote:
Sept. 21, 2015 - ZERODIUM, the premium zero-day acquisition platform, announces and hosts the world's biggest zero-day bug bounty program: The Million Dollar iOS 9 Bug Bounty.

Apple iOS, like all operating system, is often affected by critical security vulnerabilities, however due to the increasing number of security improvements and the effectiveness of exploit mitigations in place, Apple's iOS is currently the most secure mobile OS. But don't be fooled, secure does not mean unbreakable, it just means that iOS has currently the highest cost and complexity of vulnerability exploitation and here's where the Million Dollar iOS 9 Bug Bounty comes into play.

The Million Dollar iOS 9 Bug Bounty is tailored for experienced security researchers, reverse engineers, and jailbreak developers, and is an offer made by ZERODIUM to pay out a total of three million U.S. dollars ($3,000,000.00) in rewards for iOS exploits/jailbreaks.

ZERODIUM will pay out one million U.S. dollars ($1,000,000.00) to each individual or team who creates and submits to ZERODIUM an exclusive, browser-based, and untethered jailbreak for the latest Apple iOS 9 operating system and devices.

The program is open until October 31st, 2015 at 6:00 p.m. EDT, and may be terminated prior to its expiration if the total payout to researchers reaches three million U.S. dollars ($3,000,000.00).


Quote:
Eligibility / Conditions

Eligible submissions must include a full chain of unknown, unpublished, and unreported vulnerabilities/exploits (aka zero-days) which are combined to bypass all iOS 9 exploit mitigations including: ASLR, sandboxes, rootless, code signing, and bootchain.

The exploit/jailbreak must lead to and allow a remote, privileged, and persistent installation of an arbitrary app (e.g. Cydia) on a fully updated iOS 9 device (see below).

The initial attack vector must be either:
- a web page targeting the mobile browser (Mobile Safari OR Google Chrome) in its default configuration; OR
- a web page targeting any application reachable through the browser; OR
- a text message and/or a multimedia file delivered through a SMS or MMS.

The whole exploitation/jailbreak process should be achievable remotely, reliably, silently, and without requiring any user interaction except visiting a web page or reading a SMS/MMS (attack vectors such as physical access, bluetooth, NFC, or baseband are not eligible for the Million Dollar iOS 9 Bug Bounty. ZERODIUM may, at its sole discretion, make a distinct offer to acquire such attack vectors.).

The exploit/jailbreak must support and work reliably on the following devices (32-bit and 64-bit when applicable):
- iPhone 6s / iPhone 6s Plus / iPhone 6 / iPhone 6 Plus
- iPhone 5 / iPhone 5c / iPhone 5s
- iPad Air 2 / iPad Air / iPad (4rd generation) / iPad (3th generation) / iPad mini 4 / iPad mini 2

Partial or incomplete exploits/jailbreaks will not be eligible for the Million Dollar iOS 9 Bug Bounty. ZERODIUM may, at its sole discretion, make a distinct offer to acquire such partial exploits.

All submissions must be made exclusively to ZERODIUM and must include the fully functioning exploit and its source code (if any), and a detailed whitepaper describing all the zero-day vulnerabilities and techniques used in the jailbreak.



Let the games commence !
Shadownet
(12 items)
 
 
CPUMotherboardGraphicsRAM
5930k Asus rampage V Extreme  Inno3D GTX 970 Hercluez x4 airboss ultra  Gskill ripjaws DDR4 3200mhz 
Hard DriveHard DriveHard DriveCooling
WD black  WD Black  Seagate ES  Custom loop  
OSKeyboardPowerCase
Windows 10  Corsair k70  Super flower 1000 W plat  Corsair 900D 
  hide details  
Reply
Shadownet
(12 items)
 
 
CPUMotherboardGraphicsRAM
5930k Asus rampage V Extreme  Inno3D GTX 970 Hercluez x4 airboss ultra  Gskill ripjaws DDR4 3200mhz 
Hard DriveHard DriveHard DriveCooling
WD black  WD Black  Seagate ES  Custom loop  
OSKeyboardPowerCase
Windows 10  Corsair k70  Super flower 1000 W plat  Corsair 900D 
  hide details  
Reply
post #2 of 10
this is pretty nifty, makes me wish I knew more about iOS and where soft spots tend to hide.
new life
(17 items)
 
Ripley
(6 items)
 
 
CPUMotherboardGraphicsRAM
3820 @ 4.3giggles sabertooth x79 EVGA gtx 970 @ working on OC mushkin redline 16gb @ 1866 c9  
Hard DriveHard DriveHard DriveHard Drive
crucial m4 128gb WD blue 1tb hitachi deskstar 500gb WD Black 2tb 
Hard DriveOptical DriveCoolingOS
Hitachi Desktar NAS 6tb LG Bluray royale with cheese seidon 240m win 10 x64 
MonitorKeyboardPowerCase
acer G245HDL x2 logitech g710+ corsair 650w switch 810 white 
Mouse
rat 7 
CPUGraphicsRAMHard Drive
i5-4200u HD 4400 8gb @ 1600mhz Crucial MX300 275gb 
OSMonitor
Manjaro 15.6" 1080p 
  hide details  
Reply
new life
(17 items)
 
Ripley
(6 items)
 
 
CPUMotherboardGraphicsRAM
3820 @ 4.3giggles sabertooth x79 EVGA gtx 970 @ working on OC mushkin redline 16gb @ 1866 c9  
Hard DriveHard DriveHard DriveHard Drive
crucial m4 128gb WD blue 1tb hitachi deskstar 500gb WD Black 2tb 
Hard DriveOptical DriveCoolingOS
Hitachi Desktar NAS 6tb LG Bluray royale with cheese seidon 240m win 10 x64 
MonitorKeyboardPowerCase
acer G245HDL x2 logitech g710+ corsair 650w switch 810 white 
Mouse
rat 7 
CPUGraphicsRAMHard Drive
i5-4200u HD 4400 8gb @ 1600mhz Crucial MX300 275gb 
OSMonitor
Manjaro 15.6" 1080p 
  hide details  
Reply
post #3 of 10
Quote:
Originally Posted by t00sl0w View Post

this is pretty nifty, makes me wish I knew more about iOS and where soft spots tend to hide.
You're not alone haha.
My PC
(17 items)
 
  
CPUMotherboardGraphicsRAM
Intel i7 - 5820k MSI X99S Plus SLI Sapphire R9 Fury NITRO Corsair Vengeance 16GB DDR4 2800Mhz 
Hard DriveHard DriveOptical DriveCooling
Samsung SM951 512GB Seagate Barracuda 500GB Noctua NH-U14S 
OSMonitorKeyboardPower
Windows 7 Ultimate 64Bit Asus MG279Q Logitech G510 Corsair RM750 
CaseMouseMouse PadAudio
Corsair Obsidian 700D Logitech G700 Outplay Sennheiser HD598 
Audio
Tritton PC510HDA (Microphone use only) 
  hide details  
Reply
My PC
(17 items)
 
  
CPUMotherboardGraphicsRAM
Intel i7 - 5820k MSI X99S Plus SLI Sapphire R9 Fury NITRO Corsair Vengeance 16GB DDR4 2800Mhz 
Hard DriveHard DriveOptical DriveCooling
Samsung SM951 512GB Seagate Barracuda 500GB Noctua NH-U14S 
OSMonitorKeyboardPower
Windows 7 Ultimate 64Bit Asus MG279Q Logitech G510 Corsair RM750 
CaseMouseMouse PadAudio
Corsair Obsidian 700D Logitech G700 Outplay Sennheiser HD598 
Audio
Tritton PC510HDA (Microphone use only) 
  hide details  
Reply
post #4 of 10
Thread Starter 
Always have to start somewhere ! Im going to give it a bash afterwork ... The only issue is is the main people like " Posion" or "Ice" and the jail-breakers work in teams . Chances are you're not going to beat them .
Shadownet
(12 items)
 
 
CPUMotherboardGraphicsRAM
5930k Asus rampage V Extreme  Inno3D GTX 970 Hercluez x4 airboss ultra  Gskill ripjaws DDR4 3200mhz 
Hard DriveHard DriveHard DriveCooling
WD black  WD Black  Seagate ES  Custom loop  
OSKeyboardPowerCase
Windows 10  Corsair k70  Super flower 1000 W plat  Corsair 900D 
  hide details  
Reply
Shadownet
(12 items)
 
 
CPUMotherboardGraphicsRAM
5930k Asus rampage V Extreme  Inno3D GTX 970 Hercluez x4 airboss ultra  Gskill ripjaws DDR4 3200mhz 
Hard DriveHard DriveHard DriveCooling
WD black  WD Black  Seagate ES  Custom loop  
OSKeyboardPowerCase
Windows 10  Corsair k70  Super flower 1000 W plat  Corsair 900D 
  hide details  
Reply
post #5 of 10
lol @ "iOS is currently the most secure mobile OS."
Gaming
(17 items)
 
Gaming PC
(20 items)
 
 
CPUMotherboardGraphicsRAM
7700K AS Rock Z170 OC Formula Titan X Pascal 2050MHz 64GB DDR4-3200 14-14-14-34-1T 
Hard DriveHard DriveHard DriveCooling
950 EVO m.2 OS drive 850 EVO 1TB games drive Intel 730 series 500GB games drive Custom water cooling 
OSMonitorKeyboardPower
Win 10 Pro x64 AMH A399U E-Element mechanical, black switches, Vortex b... EVGA G3 1kw 
CaseMouseAudioAudio
Lian-Li PC-V1000L Redragon M901 LH Labs Pulse X Infinity DAC Custom built balanced tube amp with SS diamond ... 
Audio
MrSpeakers Alpha Prime 
  hide details  
Reply
Gaming
(17 items)
 
Gaming PC
(20 items)
 
 
CPUMotherboardGraphicsRAM
7700K AS Rock Z170 OC Formula Titan X Pascal 2050MHz 64GB DDR4-3200 14-14-14-34-1T 
Hard DriveHard DriveHard DriveCooling
950 EVO m.2 OS drive 850 EVO 1TB games drive Intel 730 series 500GB games drive Custom water cooling 
OSMonitorKeyboardPower
Win 10 Pro x64 AMH A399U E-Element mechanical, black switches, Vortex b... EVGA G3 1kw 
CaseMouseAudioAudio
Lian-Li PC-V1000L Redragon M901 LH Labs Pulse X Infinity DAC Custom built balanced tube amp with SS diamond ... 
Audio
MrSpeakers Alpha Prime 
  hide details  
Reply
post #6 of 10
Quote:
Originally Posted by EniGma1987 View Post

lol @ "iOS is currently the most secure mobile OS."

Considering how leaky all the others all, that isn't hard at all rolleyes.gif
   
The Singularity
(19 items)
 
CPUMotherboardGraphicsRAM
Core i7 4790K @4GHz with stock cooler ASUS Maximus VI Gene GTX 1080 Ti G.Skill RipjawsX 16 GB 1600 MHz 
Hard DriveHard DriveOSMonitor
840 Pro Series 256 GB WD Black 3TB Windows 7 Pro x64 Dell U3415W 
KeyboardPowerCase
Dell U2715H Corsair AX860 with terrible MDPC-x sleeving job Corsair 350D 
CPUMotherboardGraphicsRAM
Delid i7 8700K @5GHz ASUS Maximus X Formula  eVGA GTX 1080 Ti 2x8 GB Dominator Platinum 3733MHz CL17 
Hard DriveCoolingMonitorMonitor
Samsung 960 EVO 1TB Silent custom liquid cooling Dell U3415W Dell U2715H 
KeyboardPowerCaseMouse
Corsair K70 Cherry MX Red Corsair AX860 /w custom length MDPC-x cables CaseLabs SMA8 Mionix Naos 7000 
CPUMotherboardGraphicsGraphics
[Intel] Core i5 2500K [ASUS] Maximus IV Extreme [Gainward] GeForce GTX 560 Ti Phantom 2 GB [Gainward] GeForce GTX 560 Ti Phantom 2 GB 
RAMHard DriveHard DriveOptical Drive
[G.Skill] Ripjaws-X [Corsair] Force Series 3 120GB [Samsung] F3 [Asus] DRW 24B3LT 
CoolingCoolingCoolingOS
[Corsair] H100 [Gainward] Phantom [Custom] Red Cooling [Microsoft] Windows 7 Ultimate 
MonitorKeyboardPowerCase
[Acer] 3x S221HQ EyeFinity [Logitech] G110 [Corsair] AX1200 [NZXT] Phantom Singularity mod by Xioros 
MouseMouse PadAudio
[Roccat] Kone [+] [Razer] Vespula [Logitech] X-530 5.1 Surround 
  hide details  
Reply
   
The Singularity
(19 items)
 
CPUMotherboardGraphicsRAM
Core i7 4790K @4GHz with stock cooler ASUS Maximus VI Gene GTX 1080 Ti G.Skill RipjawsX 16 GB 1600 MHz 
Hard DriveHard DriveOSMonitor
840 Pro Series 256 GB WD Black 3TB Windows 7 Pro x64 Dell U3415W 
KeyboardPowerCase
Dell U2715H Corsair AX860 with terrible MDPC-x sleeving job Corsair 350D 
CPUMotherboardGraphicsRAM
Delid i7 8700K @5GHz ASUS Maximus X Formula  eVGA GTX 1080 Ti 2x8 GB Dominator Platinum 3733MHz CL17 
Hard DriveCoolingMonitorMonitor
Samsung 960 EVO 1TB Silent custom liquid cooling Dell U3415W Dell U2715H 
KeyboardPowerCaseMouse
Corsair K70 Cherry MX Red Corsair AX860 /w custom length MDPC-x cables CaseLabs SMA8 Mionix Naos 7000 
CPUMotherboardGraphicsGraphics
[Intel] Core i5 2500K [ASUS] Maximus IV Extreme [Gainward] GeForce GTX 560 Ti Phantom 2 GB [Gainward] GeForce GTX 560 Ti Phantom 2 GB 
RAMHard DriveHard DriveOptical Drive
[G.Skill] Ripjaws-X [Corsair] Force Series 3 120GB [Samsung] F3 [Asus] DRW 24B3LT 
CoolingCoolingCoolingOS
[Corsair] H100 [Gainward] Phantom [Custom] Red Cooling [Microsoft] Windows 7 Ultimate 
MonitorKeyboardPowerCase
[Acer] 3x S221HQ EyeFinity [Logitech] G110 [Corsair] AX1200 [NZXT] Phantom Singularity mod by Xioros 
MouseMouse PadAudio
[Roccat] Kone [+] [Razer] Vespula [Logitech] X-530 5.1 Surround 
  hide details  
Reply
post #7 of 10
Thread Starter 
It wont be long now before its jailbroken
Nothing is secure
Shadownet
(12 items)
 
 
CPUMotherboardGraphicsRAM
5930k Asus rampage V Extreme  Inno3D GTX 970 Hercluez x4 airboss ultra  Gskill ripjaws DDR4 3200mhz 
Hard DriveHard DriveHard DriveCooling
WD black  WD Black  Seagate ES  Custom loop  
OSKeyboardPowerCase
Windows 10  Corsair k70  Super flower 1000 W plat  Corsair 900D 
  hide details  
Reply
Shadownet
(12 items)
 
 
CPUMotherboardGraphicsRAM
5930k Asus rampage V Extreme  Inno3D GTX 970 Hercluez x4 airboss ultra  Gskill ripjaws DDR4 3200mhz 
Hard DriveHard DriveHard DriveCooling
WD black  WD Black  Seagate ES  Custom loop  
OSKeyboardPowerCase
Windows 10  Corsair k70  Super flower 1000 W plat  Corsair 900D 
  hide details  
Reply
post #8 of 10
Time to start a new career in hacking....
2009
(15 items)
 
   
CPUMotherboardGraphicsRAM
i7 920 4.0Ghz 1.20v golden? Asus p6x58D Premium 770gtx Windforce OC ocz gold 1600 8-8-8-24-74-1T 
Hard DriveCoolingOSMonitor
x25-m80G2 Black640 H100 GT AP-15s Windows 7 Pro. 64 bit Dell U2410 1920x1200 IPS 
PowerCaseAudio
corsair tx 850 antec 1200 SoundBlaster ZX 
CPUMotherboardGraphicsRAM
Intel i7 3720qm(ivy) 2.6 Sager GTX 670m 8 gig 
Hard DriveKeyboardPower
80gig mssd steel series Huge power brick 
  hide details  
Reply
2009
(15 items)
 
   
CPUMotherboardGraphicsRAM
i7 920 4.0Ghz 1.20v golden? Asus p6x58D Premium 770gtx Windforce OC ocz gold 1600 8-8-8-24-74-1T 
Hard DriveCoolingOSMonitor
x25-m80G2 Black640 H100 GT AP-15s Windows 7 Pro. 64 bit Dell U2410 1920x1200 IPS 
PowerCaseAudio
corsair tx 850 antec 1200 SoundBlaster ZX 
CPUMotherboardGraphicsRAM
Intel i7 3720qm(ivy) 2.6 Sager GTX 670m 8 gig 
Hard DriveKeyboardPower
80gig mssd steel series Huge power brick 
  hide details  
Reply
post #9 of 10
Thread Starter 
Quote:
Originally Posted by FlyingNugget View Post

Time to start a new career in hacking....

Pen-testing and cyber security is a very well paid job and great fun. Recommended career path .. Legally of course.
Shadownet
(12 items)
 
 
CPUMotherboardGraphicsRAM
5930k Asus rampage V Extreme  Inno3D GTX 970 Hercluez x4 airboss ultra  Gskill ripjaws DDR4 3200mhz 
Hard DriveHard DriveHard DriveCooling
WD black  WD Black  Seagate ES  Custom loop  
OSKeyboardPowerCase
Windows 10  Corsair k70  Super flower 1000 W plat  Corsair 900D 
  hide details  
Reply
Shadownet
(12 items)
 
 
CPUMotherboardGraphicsRAM
5930k Asus rampage V Extreme  Inno3D GTX 970 Hercluez x4 airboss ultra  Gskill ripjaws DDR4 3200mhz 
Hard DriveHard DriveHard DriveCooling
WD black  WD Black  Seagate ES  Custom loop  
OSKeyboardPowerCase
Windows 10  Corsair k70  Super flower 1000 W plat  Corsair 900D 
  hide details  
Reply
post #10 of 10
...and the android community was swiftly silenced tongue.gif!
 
QUEEN OF BLADES
(15 items)
 
ASUS U6Sg
(15 items)
 
CPUMotherboardGraphicsRAM
I7 920 REV D0@4.2 HT Asus Rampage II Extreme CFX: ASUS R9 270X DCUII 6GB DDR3 XMP CL6 TRIDENT 
Hard DriveOptical DriveCoolingOS
Vertex 2 180 GB+RAID 0 2 * 1 TB SAMSUNG Sony Optiarc Labelflash Thermalright Venoumous X W7 X64 Ultimate RETAIL 
MonitorKeyboardPowerCase
Dell U2410 IPS Logitech Corsair CMPSU-850TX Antec 1200 
MouseMouse PadAudio
Logitech HAMA Xonar STX / Auzen Forte 
CPUMotherboardGraphicsRAM
XEON 5650X @4.45 GHz  Rampage III Formula PCGH CFX: ASUS R9 280X DCUII 16GB G-SKILL CL9@ 1643 MHz 
Hard DriveOptical DriveCoolingOS
1x 850 Pro 256 GB + 1xWD 500 GB + 2x3TB WD RED Plextor PX-L89OSA Thermalright VX W10 X64 Ultimate RETAIL 
MonitorKeyboardPowerCase
ACER B203W Razer Deathstalker Corsair CMPSU-750TX Antec 902 
MouseMouse PadAudio
Logitech G800S Logitech Gaming  Creative Titanium HD + FiiO E17 
CPUMotherboardGraphicsRAM
Intel Core 2 Duo : T8300 Asus U6000Sg Series Notebook NVIDIA 9300 GS 4GB Kingston CL4 
Hard DriveOptical DriveCoolingOS
Hitachi Ultrastar Asus POS Stock Asus with MX3 W7 x64 Ultimate RETAIL 
MonitorAudio
Asus 12.1 " LED Creative X-Fi EX54 
  hide details  
Reply
 
QUEEN OF BLADES
(15 items)
 
ASUS U6Sg
(15 items)
 
CPUMotherboardGraphicsRAM
I7 920 REV D0@4.2 HT Asus Rampage II Extreme CFX: ASUS R9 270X DCUII 6GB DDR3 XMP CL6 TRIDENT 
Hard DriveOptical DriveCoolingOS
Vertex 2 180 GB+RAID 0 2 * 1 TB SAMSUNG Sony Optiarc Labelflash Thermalright Venoumous X W7 X64 Ultimate RETAIL 
MonitorKeyboardPowerCase
Dell U2410 IPS Logitech Corsair CMPSU-850TX Antec 1200 
MouseMouse PadAudio
Logitech HAMA Xonar STX / Auzen Forte 
CPUMotherboardGraphicsRAM
XEON 5650X @4.45 GHz  Rampage III Formula PCGH CFX: ASUS R9 280X DCUII 16GB G-SKILL CL9@ 1643 MHz 
Hard DriveOptical DriveCoolingOS
1x 850 Pro 256 GB + 1xWD 500 GB + 2x3TB WD RED Plextor PX-L89OSA Thermalright VX W10 X64 Ultimate RETAIL 
MonitorKeyboardPowerCase
ACER B203W Razer Deathstalker Corsair CMPSU-750TX Antec 902 
MouseMouse PadAudio
Logitech G800S Logitech Gaming  Creative Titanium HD + FiiO E17 
CPUMotherboardGraphicsRAM
Intel Core 2 Duo : T8300 Asus U6000Sg Series Notebook NVIDIA 9300 GS 4GB Kingston CL4 
Hard DriveOptical DriveCoolingOS
Hitachi Ultrastar Asus POS Stock Asus with MX3 W7 x64 Ultimate RETAIL 
MonitorAudio
Asus 12.1 " LED Creative X-Fi EX54 
  hide details  
Reply
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Software News
Overclock.net › Forums › Industry News › Software News › [Zerodium] ZERODIUM's Million Dollar iOS 9 Bug Bounty