How We Hacked Half of Poland in One Evening

Overview

This was a real heavy hitter. Together with Kamil Szczurowski, we revealed the behind-the-scenes of our "happy hunting" session, during which we found critical RCE vulnerabilities in the PAD CMS system (massively used in Public Information Bulletins across the country). The presentation was the culmination of a joint action with CERT Polska, which ultimately led to an intervention by the Government Plenipotentiary for Cybersecurity. Pure technical meat and a step-by-step path from zero to root in government offices.

Speaker

Robert "ProXy" Kruczek
Cybersecurity Specialist / Red Teamer