HackingDept

[STM Cyber @stm_cyber]

We are releasing the first wave of vulnerabilities targeting @paxtechnology PAX Android POS terminals.
The list includes pre-auth RCE on the root account by exploiting a hidden bootloader functionality via USB.

You can expect more POS CVEs soon™ :)

https://t.co/7DjDTxZ3EU

[STM Cyber @stm_cyber]

Our pentesters Stanisław Koza and Jakub Sajniak (@kubolos231) found another high vuln in the Cisco product. It was marked CVE-2023-20211 and it allows any auth user to extract any info from the Cisco Unified Communications Manager using SQLi. Our PoC: https://t.co/qwCsfv0HGC

[p4 @p4_team]

Get ready, set, hack! https://t.co/q8OOuOigww just hit the ground! ⏰ Less than 24hrs to uncover flags, conquer snacks & tackle tricky AI challenges 🤖. This year we replaced all boring crypto puzzles with 2 zajebiste tasks.

[p4 @p4_team]

Third time's a charm! Once again @p4_team and @DragonSectorCTF have joined forces as the Poland Can Into Space team to conquer space 🇵🇱🚀🌌 and this time we did🏆! We won @hack_a_sat, the space security competition! Thanks to🥈SpaceBitsRUs and🥉@solarwine_ctf for a fierce fight!

[STM Cyber @stm_cyber]

The best feature of the decompiler is one that spawns random processes and gives you a heart attack.

Check out our story on how to do RCE in JEB decompiler - @jebdec - running on Java 18: https://t.co/SITHd0w0gf

[p4 @p4_team]

Winner winner chicken dinner 🦆Poland stronk 🇵🇱 💪 Once again we won @hack_a_sat quals 🚀 together with @DragonSectorCTF and friends! #HackASat3 🛰️

[HackingDept @hacking_dept]

Poniżej zamieszczamy częściowe wyniki konkursu CYBERSEC CTF by HackingDept #CS22_EXPO
Zwycięzcom i wszystkim uczestnikom gratulujemy 💪 Mamy nadzieję, że zobaczymy się na kolejnej edycji.

[#CyberMadeInPoland @cyber_poland]

Na koniec pierwszego dnia konferencji rozstrzygnęliśmy konkurs #cybersecurity CYBERSEC CTF by @hacking_dept.

Gratulujemy wszystkim, którzy podjęli wyzwanie, a szczególnie zwycięzcom #cyber zmagań 💪🏻👏🏻🎊

[HackingDept @hacking_dept]

Nasz CTF startuje za niecałe 30 min, jeżeli chcesz zgarnąć nasze gadżety spróbuj swoich sił na:
https://t.co/kv03GVJkgM

A jeżeli jesteś na @CYBERSECEU #CS22_EXPO wpadnij i się przywitaj :)

[HackingDept @hacking_dept]

Jeżeli jesteś studentem spróbuj swoich sił!
Mija ostatnia szansa aby się zarejestrować i wziąć udział w konkursie i konferencji.
Jeżeli nie możesz przyjechać, a chcesz zmierzyć się z zadaniami, nic straconego, zarejestruj się na wydarzenie online.

[#CyberMadeInPoland @cyber_poland]

Ostatnia szansa, by się zapisać i wziąć udział w konkursie #cybersecurity❗️

15 zadań,
nagrody pieniężne,
okazja do sprawdzenia swoich zdolności z zakresu cyberbezpieczeństwa.

Wydarzenie ma miejsce podczas CYBERSEC Forum/EXPO #CS22_EXPO.

Dołącz do nas❗️
https://t.co/XlfWpbWrsb

[p4 @p4_team]

Second year in a row @p4_team and @dragonsectorctf have joined forces as the Poland Can Into Space team to conquer space 🇵🇱 🚀 🌌 and once again we have finished 🥈 in a space security @hack_a_sat competition! Congrats to 🥇 @solarwine_ctf and 🥉@dicegangctf.
#zawszedrudzy

[HackingDept @hacking_dept]

We are proud of the whole @p4_team, including our CEO @trodbert for this outstanding performance!

[p4 @p4_team]

Last weekend, p4 representation flew to Saudi Arabia for our first onsite CTF since the COVID-19 breakout. The visit was fruitful - 3rd place and 100k SR (almost 27k USD) reward. Thanks to @athackcon for the invitation, awesome CTF, and your outstanding hospitality.

[STM Cyber @stm_cyber]

Our research on @IBM Password Sync Plugin for Windows AD was recognized in their Security Bulletin https://t.co/oRQEP6VPMn
PoCs for our findings:
LDAP Injection/account takeover
https://t.co/8kDOsnhopX
Memory corruption - stack/heap
https://t.co/S9DQHPYxMG
https://t.co/VTo9O8N1wH

[STM Cyber @stm_cyber]

Last weekend we had the pleasure 😀 of hosting our friends from @p4_team who participated in the #GoogleCTF challenge⌨🧠. Congratulations on your 8th position in the competition ✊🦾✊. Our new office has survived a trial by fire🥷.

[p4 @p4_team]

Once again, we have teamed up with @DragonSectorCTF to participate in the @hack_a_sat, a space security CTF contest. This year we continue to prove that Poland Can Into Space and now we won the qualifications 🥇. Wish us luck in the finals! 🇵🇱🚀🌌
https://t.co/2tpygWyyNr

[STM Cyber @stm_cyber]

Helpful collection of #Excel4.0 functions for #RedTeam and #BlueTeam. Check out our #github: https://t.co/6OshrZnaeN #pentest

[p4 @p4_team]

As every year, we organise a #CTF for you to play. This time, @OMHconf is our host and @PolskaHuawei is our sponsor. Everyone will have fun - expect tough challenges for elite hackers, and easier tasks for beginners. Register at https://t.co/OFyIHLdxqt. CTF starts in 9 days!

[HackingDept @hacking_dept]

Our friend from STM Solutions @_mzer0 has released a cool open source tool for searching and pwning Java RMI.
It seems to work really nice :)

https://t.co/5qgaYkUyLH

[STM Cyber @stm_cyber]

As we promised we have a surprise for you. We present a tool made by
@_mzer0 RmiTaste allows security professionals to detect, enumerate, interact and attack RMI services by calling remote methods with gadgets from ysoserial, and more... https://t.co/leL4QIKxnD
#RMI #Java

[p4 @p4_team]

We still don't know how the final scoreboard looks like, but our on-orbit challenge payload/plan was the best and it's going to be executed tonight on a real satellite making a photo of the moon :).
We can now definitely say that #PolandCanIntoSpace 🇵🇱🚀🌌🌙

[Adam 'pi3' Zabrocki @Adam_pi3]

Satellite arrived... @p4_team @DragonSectorCTF @hack_a_sat #HackASat #PolandCanIntoSpace

[Hack-A-Sat @hack_a_sat]

Find out who made it - Will these top teams regain control? Don't miss the final #HackASat event Aug. 7-9. #LaunchDotCom

@plaidctf @DragonSectorCTF @p4_team @AddVulcan @pfs_ctf @fluxfingers @EatSleepPwnRpt @redrocket_ctf
|| @SecureAerospace @DEFCON @DefenseDigital @AFResearchLab