ROBERT KRUCZEK
← Back to talks
Sekurak Hacking Party - Gliwice

Secure File Upload

COMPLETED
📅 Date: April 26, 2025 📍 Location: Gliwice

Overview

File upload modules are often the Achilles' heel of web applications. I delivered a solid dose of knowledge on how the lack of proper validation allows an attacker to upload a web shell and take full control of the server. Fun fact: this presentation turned out to be a great prelude to our later discoveries in government CMS platforms.

Speaker

Robert Kruczek
Robert "ProXy" Kruczek
Cybersecurity Specialist / Red Teamer