Anyway, this is what I built for Pwn2Own Berlin 2026 — a completely handmade, logic-only Microsoft Edge Full Chain, with no memory corruption, and no AI at all! 🔥
The whole chain is made up of five bugs and two Windows features. I have also shared the whole bug-hunting and chaining process at this year’s HITCON and Hexacon, plus some fun stories along the way. You can check the slides here!
Also, maybe everyone thinks LLMs can already pwn everything in the AI era, so something made entirely by hand somehow feels a bit more precious. That might also be why this chain was nominated for this year’s Pwnie Awards and won the Epic Achievement award. 🎉
I'm no hacker whatsoever, and not even a professional IT guy, but I really enjoyed that blog post. Super cool exploit chain and congrats to your award, from my naive point of view well earned! Now...
I'm no hacker whatsoever, and not even a professional IT guy, but I really enjoyed that blog post. Super cool exploit chain and congrats to your award, from my naive point of view well earned!
Now I'm curious how to pop an Edge from Calc, though
I'm no hacker whatsoever, and not even a professional IT guy, but I really enjoyed that blog post. Super cool exploit chain and congrats to your award, from my naive point of view well earned!
Now I'm curious how to pop an Edge from Calc, though
This is absolutely hilarious. If others have similar examples, I'd love to see more!
Sounds like somebody didn't learn their lesson about deep integrations between the browser and the operating system from the IE6 days.