BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.com//bsides-cymru-2023-2022//speaker//S3VMBS
BEGIN:VEVENT
SUMMARY:Hacking to defend: How we hacked into a Polar Orbit Satellite and 
 managed to get a full system compromise - James (0xJay)\, Josh Allman
DTSTART:20230211T143000Z
DTEND:20230211T150000Z
DTSTAMP:20260818T074222Z
UID:pretalx-bsides-cymru-2023-2022-8JRWD9@pretalx.com
DESCRIPTION:Initial discovery was from a Discord message\; Some people wer
 e talking about having access to a Polar Orbit Satellite due to it not hav
 ing any authentication. We knew this was a risk in the wrong hands. We dec
 ided to research the Web Application shortly after\, we were able to get a
  shell and escalate our privileges. While on the system we managed to iden
 tify privilege escalation vectors while also performing source code analys
 is where we found further command injection vulnerabilities. To ensure oth
 er hackers do not kill our shell and patch the bug to perform malicious ac
 tivities\, we created a backup shell for president access!
LOCATION:Track 1- Dragon Suite
URL:https://pretalx.com/bsides-cymru-2023-2022/talk/8JRWD9/
END:VEVENT
END:VCALENDAR