Idije Awọsanma ZeroDay akọkọ, ti a pinnu lati ṣe idanimọ awọn ailagbara ni sọfitiwia orisun-ìmọ ti a lo ni awọn agbegbe awọsanma, yoo waye ni Ilu Lọndọnu ni Oṣu Kejila ọjọ 10-11 ni apejọ Black Hat Europe. Adagun ẹbun fun idije naa ti ṣeto si $ 4.5 million. Ẹbun ti o tobi julọ, $ 300, ni a funni fun gige nginx. Awọn ẹbun ti $100 ni a funni fun gige Apache Tomcat, Redis, PostgreSQL, ati MariaDB.
Lati gba awọn ami-ẹri, awọn olukopa gbọdọ ṣafihan awọn iṣiṣẹ ṣiṣẹ ti o lo nilokulo awọn ailagbara ọjọ-ọjọ aimọ tẹlẹ. Ninu ẹka “Ipilẹṣẹ”, awọn iṣamulo gbọdọ gba salọ kuro ni apoti ti o ya sọtọ tabi ẹrọ foju, lakoko ti o wa ninu awọn ẹka miiran, wọn gbọdọ yorisi ipaniyan koodu latọna jijin. Awọn atunto fun awọn ohun elo ti gepa ti gbalejo lori GitHub.
Awọn ẹka wọnyi, awọn ohun elo ikọlu ati awọn ere ni a dabaa:
- Apoti ati agbara:
- Docker ($ 40,000 fun aworan apoti ti a ti pese silẹ ti ikọlu ati $ 60,000 fun ikọlu nipa lilo aworan eyikeyi),
- Apoti ($40,000/$60,000),
- package ekuro Linux ati bẹbẹ lọ Ubuntu ($30,000).
- Àwọn olupin wẹ́ẹ̀bù:
- nginx ($300,000),
- Apache Tomcat ($100,000),
- Aṣojú ($50,000),
- Caddy ($50,000).
- DBMS:
- Redis ($ 25,000 fun RCE pẹlu wiwọle ti o jẹri, $ 100,000 fun aijẹri),
- PostgreSQL ($20,000/$100,000),
- MariaDB ($20,000/$100,000).
- SI AWỌN:
- Ollama ($25,000),
- vLLM ($25,000),
- Ohun elo Irinṣẹ Apoti NVIDIA ($40,000 fun ijade eiyan kan).
- Kubernetes ati Awọsanma-Ibilẹ:
- Kubernetes API Server ($40,000),
- Olupin Kubelet ($80,000),
- Grafana ($10,000 fun RCE fun iwọle ti o jẹri ati $40,000 fun RCE laisi ijẹrisi),
- Prometheus ($40,000),
- Fluent Bit ($ 10,000).
- Adaṣiṣẹ ati awọn irinṣẹ DevOps:
- Afẹfẹ Apache ($40,000),
- Jenkins ($40,000),
- GitLab CE ($ 40,000).
Awọn ohun elo gba titi di Oṣu kejila ọjọ 1st. Awọn oṣiṣẹ ti awọn ile-iṣẹ onigbowo (AWS, Microsoft, Google Cloud, Wiz) ati awọn olugbe ti awọn orilẹ-ede ti a ti gba laaye (Russia, China, Iran, North Korea, Cuba, Sudan, Syria, Libya, Lebanon) ko ni ẹtọ lati kopa.
orisun: opennet.ru
