SQLi to Root Access: Exploiting a ISP infrastructure

What if we play with the ISP? In this talk I am going to tell you how one day, something that started as a simple SQL injection, going through LFI, RCE, ended up in a pwn of an internet provider in my country that affected more than 25 cities, being able to intercept user traffic and other stuff.

Presented at Security Fest 2023.

About Ignacio Navarro

My name is Ignacio, I am 25 years old and I am from Río Cuarto, Argentina. I am currently working as a Sr. Software Engineer. I started to enter the world of infosec about 6 years ago. My interests include code analysis, webapps security and cloud security Speaker at Diana Initiative, Hacktivity Budapest, 8.8, Ekoparty @Ignavarro1