ToorCon 20

September 14-16, 2018

Westin San Diego, Emerald Plaza



Our contest network lets you get a chance to try your hand at numerous exploits that are commonly found in embedded electronics.


Prizes are limited! There will be only one first, second, and third place winner, and other prizes will be given while they last. To qualify for prizes you must score a minimum of 12,000 points.

First Place Second Place Third Place
$100 $50 $25
T-shirts! T-shirts! T-shirts!


This contest only runs during DEF CON

Rules for 0-DAY TRACK

Identify and exploit a vulnerability:

Submit 0-Day overview and proof of responsible disclosure:

Demonstrate your exploit:

Email us if you have any questions or concerns:

Devices for 0-DAY TRACK

Device Software/Firmware Version
BlackDecker Wifi-Enabled Crock-Pot
AIMOX Smart Electric Kettle
Logitech POP Smart Button Kit
Awair: Air Quality Monitor
FREDI Baby Monitor Wireless WIFI IP Surveillance Camera
Ecobee Smart Thermostat
Belkin WeMo Mini Wi-Fi Smart Plug
Anova Precision Cooker
Google OnHub
Google WiFi
Amazon Echo
Amazon Echo Dot
WD My Cloud NAS
Canary Device Canary CAN100USWT
CUJO Smart Internet Security Firewall
Apple Time Capsule
FitBit Alta
FitBit Blaze
FitBit flex 2
FitBit charge 2
Fitbit Aria 2
Fitbit Ionic
Nest Cam: Outdoor

Nest donated devices!

Device Software/Firmware Version
Nest Thermostat
Nest Learning Thermostat 3rd gen
Nest Thermostat E
Nest Temperature Sensor
Nest Protect 2nd gen
Nest Cam IQ
Nest Hello
Nest Secure
Nest Detect
Nest Tag

Starbuck's Donated Device

Starbucks Mastrena II
Serial #41-000067
Software Version 1.67
Overview: This is a new expresso machine which is has internet connectivity to allow for telemetry data, recipe updates to help streamline the production process and help with trouble shooting machine wear and tear.

GE Appliances Donated Devices

GE Wi-Fi Connect Built-In Washer
  Model number is GTW750CSLWS

Geotab's Donated Device

Geotab GO8
  The Geotab GO8 is a small form-factor fleet management solution and vehicle tracking device that simply plugs directly into your vehicle’s OBDII port.