Robert Tomkowski

Software and security engineer. Currently working on his world domination plan as CEO of @hacking_dept and Head of R&D at @stm_cyber. Member of @p4_team.

[Robert Tomkowski @trodbert]

@kreisaisjelis @BonusPlay3 @ccdcoe Sure, but @ccdcoe lacks communication in this matter. Everyone would have agreed with such results if the organizers had sent a clear message.

[Robert Tomkowski @trodbert]

@havochavoc13 @kreisaisjelis @BonusPlay3 @ccdcoe But those guys have scientific, exact, and fair scoring.
Locked Shields scoring is far from precise in all of those criteria.

[The Hacker News @TheHackersNews]

Popular PAX PoS systems used in countless stores worldwide are vulnerable to crippling attacks.

Hackers could hijack transactions, steal data, and wreak havoc.

Are you patched? Read the full story: https://t.co/vusSi2HBMi

#cybersecurity #hacking

[Robert Tomkowski @trodbert]

It's the tip of the iceberg :)

[STM Cyber @stm_cyber]

We are releasing the first wave of vulnerabilities targeting @paxtechnology PAX Android POS terminals.
The list includes pre-auth RCE on the root account by exploiting a hidden bootloader functionality via USB.

You can expect more POS CVEs soon™ :)

https://t.co/7DjDTxZ3EU

[STM Cyber @stm_cyber]

We are releasing the first wave of vulnerabilities targeting @paxtechnology PAX Android POS terminals.
The list includes pre-auth RCE on the root account by exploiting a hidden bootloader functionality via USB.

You can expect more POS CVEs soon™ :)

https://t.co/7DjDTxZ3EU

[Gynvael Coldwind @gynvael]

[PL] Oprócz Paged Out!, wypuściliśmy dzisiaj też wywiad z 𝗣𝗼𝗹𝗮𝗻𝗱 𝗖𝗮𝗻 𝗜𝗻𝘁𝗼 𝗦𝗽𝗮𝗰𝗲, tj. (@p4_team + @DragonSectorCTF + przyjaciele) o HACK-A-SAT 4:
↓↓↓
https://t.co/Y2owucLLuq
↑↑↑

[Robert Tomkowski @trodbert]

@haqpl @Hacker0x01 Congrats!

[STM Cyber @stm_cyber]

Our pentesters Janek and Szymon pranked us in our Microsoft Teams group using interesting phishing 🎣 trick!
Check out what they have discovered and how they manage to earn a free pizza 🍕 using message replay spoofing on Teams:
https://t.co/HMHGhl5VST

[CERT Polska @CERT_Polska]

🎆Zostaliśmy CNA czyli CVE Numbering Authority! Od dziś nadajemy podatnościom numery i dbamy o jakość bazy, która jest publiczna i dostępna za darmo. Baza CVE to podstawa dla organizacji z całego świata w identyfikacji i śledzeniu informacji o nowych lukach bezpieczeństwa.

[p4 @p4_team]

Get Ready! p4 ctf finals at #CS23_EXPO @CYBERSECEU starts in 17 hours!
Brace yourself for the clash of elite hackers from:
@justCatTheFish @FlatNetworkOrg @fluxfingers @0rganizers @EmuExploit @hxpctf @DragonSectorCTF @allesctf
Good luck to all participants!
Small spoiler below 🤫

[p4 @p4_team]

p4 CTF 2023 teaser is over!
🥇@justCatTheFish
🥈 NeSE (Never Stop Exploiting)
🥉 @r3kapig
Congrats to all players! Great hakz and willpower!

[p4 @p4_team]

Get ready, set, hack! https://t.co/q8OOuOigww just hit the ground! ⏰ Less than 24hrs to uncover flags, conquer snacks & tackle tricky AI challenges 🤖. This year we replaced all boring crypto puzzles with 2 zajebiste tasks.

[p4 @p4_team]

Tick, Tock ⏰ Tick, Tock ⏰ Only 10h remaining to start the p4 CTF teaser! Register now at https://t.co/Ymuc9jmmcF and show your skills 💪 by beating our challenges!

[p4 @p4_team]

Are you ready for a #cybersecurity challenge? Join the #p4ctf teaser contest on May 13th! The finals will take place at the Cybersec Forum in Katowice on June 21st. Top 10 eligible teams get travel and accomodation
Register at https://t.co/Ymuc9jmmcF more: https://t.co/kiXo4JPAWo

[Robert Tomkowski @trodbert]

As 🇵🇱 we scored third 🥉 in #LockedShields2023. I had the pleasure of being the leader of the Web Application sub-team, which had the best score 🏆 in the whole NATO. We detected and fixed almost every vuln and threat 🛡️. With the best ppl and hard work, you can do anything!

[NATO CCDCOE @ccdcoe]

#LockedShields2023 has concluded! This year was even more competitive than previous years. As organisers, we saw a big jump in quality within the Blue Teams.

The most effective participants were the 🇸🇪-🇮🇸 joint team, followed by the 🇪🇪-🇺🇸 joint team and the 🇵🇱 team. Good job!

[Robert Tomkowski @trodbert]

See you in Vegas 🙂

[p4 @p4_team]

Today Poland Can Into Space placed fourth on @hack_a_sat qualifier and we're going to Vegas!
This year's finals will include hacking the Moonlighter platform on orbit! Can 🇵🇱🥫🚀 conquer real 🛰️? We'll find out during DEFCON 31.

[p4 @p4_team]

p4ctf 2022 is over. The winners are C4T BuT S4D, @justCatTheFish and @id10t_ctf. Congrats!

[Robert Tomkowski @trodbert]

Finally, I Have Them All

[p4 @p4_team]

Third time's a charm! Once again @p4_team and @DragonSectorCTF have joined forces as the Poland Can Into Space team to conquer space 🇵🇱🚀🌌 and this time we did🏆! We won @hack_a_sat, the space security competition! Thanks to🥈SpaceBitsRUs and🥉@solarwine_ctf for a fierce fight!

[STM Cyber @stm_cyber]

The best feature of the decompiler is one that spawns random processes and gives you a heart attack.

Check out our story on how to do RCE in JEB decompiler - @jebdec - running on Java 18: https://t.co/SITHd0w0gf

[Rev @RevToJa]

Ciekawostka: projekt ustawy o ochronie ludności wprowadza (oprócz zlikwidowania @RCB_RP) obowiązek preinstalacji przez sprzedawców mobilnej aplikacji Regionalnego Systemu Ostrzegania. ALERT SMS (zamiast RCB) wysyłany będzie przez MSWiA.
Cały projekt na https://t.co/Mzt87JwGK2.