Filip Karczewski

Independent Penetration Tester | Web, API, & Mobile Pentesting | Cybersecurity Consultant

[Filip Karczewski @karczewski_io]

@mario_kozlo Wstrząsające !!!

[Filip Karczewski @karczewski_io]

@DowOperSZ Pięknie! 👏👏

[Filip Karczewski @karczewski_io]

🚨 New write-up + Video PoC!

Exploiting RCE in Apache Tomcat 10.1.53 (CVE-2026-34486). I break down the vulnerability and show exactly how it can be triggered in practice.

https://t.co/NVnSTn5yw3

#infosec #RCE #ApacheTomcat #CVE202634486 #AppSec

[Filip Karczewski @karczewski_io]

Copy Fail (CVE-2026-31431): My custom exploit demo. 💻💥

Watch how a low-privilege user in Container A can attack and compromise Container B by poisoning the Linux Page Cache.

https://t.co/j8OndFQy8d
#CopyFail #CyberSecurity #InfoSec #Linux #CloudSecurity #Docker #Cyber

[Filip Karczewski @karczewski_io]

Awesome privilege escalation chain on #GKE #Kubernetes 😍😍👏 Worth reading.

https://t.co/CoUipUH5zB

#pentesting #CyberSecurity

[Filip Karczewski @karczewski_io]

@mehhsecurity I'll see if I can find the time, but I still feel like I could spend more time with Ubuntu Touch. 😈😇

[Filip Karczewski @karczewski_io]

@mehhsecurity I made a CVE request. But I really feel this is one of those times when the pentester hears "but where's the problem?" or "we'll deal with it later". Maybe I'm wrong 😉

[Filip Karczewski @karczewski_io]

🔥🔥🔥 SQL Injection > #RCE > Priv Esc

I made an app for pentesters & devs to experiment with #SQLi vulnerability and #Linux priv esc.

DOCKER Linux/amd64:
docker run -p 8091:80 -d filipkarc/sqli-postgres-rce-privesc-hacking-playground

#ethicalhacking #pentesting #bugbounty