top of page

RESEARCH & DEVELOPMENT
LAB

Our R&D team consists only of enthusiasts - experienced pentesters, IT security researchers, and programmers. Most of our team belongs to members of the best Polish CTF groups - P4 and Dragon Sector. Together with them, we are successful in global competitions, repeatedly showing that we are among the top experts in the field of IT security.

CTF SUCCESS

  • HITCON CTF Finals

  • Insomni'Hack CTF Finals

  • Google CTF finals

  • hxp CTF finals

  • Midnight Sun CTF Finals

  • WhiteHat CTF Finals

  • CTF "Hack-a-sat" finals.

  • @Hack final in Saudi Arabia

  • 1st place in the qualification for the "Hack-a-sat" competition.

  • Finals in TrendMicro CTF

Cybersecurity R&D plays a central role in being able to conduct quality penetration tests and lies at the core of our identity as a company. The tools developed based on in-house research enable us to run penetration tests, including APT Red Team tests, more efficiently.

 

True to the slogan "hack the unhackable", our extensive R&D efforts enable us to succeed where others fail.

​

​

OUR EXPERTISE
R&D LAB

Reverse Engineering

We specialize in the deconstruction of complex software and the analysis of non-standard binary systems.

​

  • Advanced Analysis: Leveraging Ghidra, BinDiff, and QEMU for precise patch verification and cross-platform analysis.

​

  • Automation & Emulation: Utilizing symbolic execution (angr, Unicorn) and state-of-the-art fuzzing (AFL++, LibAFL, Hongfuzz).

​

  • Exploitation Mastery: We bridge the gap between discovery and proof, quickly filtering false positives through expert exploit development.

Architecture, Code & Design Analysis

We secure software at the foundational level, identifying flaws before they can be exploited in the wild.

​

  • Static & Manual Review: Combining automated scanning with expert-led Manual Code Review.

​

  • Threat Modeling: Identifying structural risks, boundary vulnerabilities, and third-party dependency issues.

​

  • Industry Standards: Ensuring full compliance with OWASP best practices and the Principle of Least Privilege.

Hardware Security Testing

We assess the physical resilience of devices against modern hardware-level threats.

​

  • Firmware Recovery: Forensic extraction of firmware from BGA, ASIC, and monolith components.

​

  • Physical Attacks: Expertise in Voltage Glitching, Side-Channel Analysis (Power/EMI), and EMI injection.

​

  • Interface Enumeration: Probing and securing debug connectors, including JTAG, UART, and SWD.

Advanced Security Domains

Proven track record in securing the most critical layers of modern technology:

​

  • Secure Boot verification and low-level ARM boot chain analysis (Qualcomm, Unisoc, Allwinner).

​

  • Debugging and hardening TrustZone (Secure World) applications.

​

  • Defeating advanced Code Obfuscation (control-flow flattening) and JavaCard security analysis.

5G Security Laboratory

Comprehensive penetration testing for telecommunications infrastructure and end-user equipment.

​

  • Network & Core Analysis: Simulating VNF environments (Open5GS, Free5GC) and auditing OSS/BSS systems.

​

  • Radio Attacks: Testing resilience against Rogue Base Stations (IMSI Catchers/Stingrays) in 5G SA contexts.

​

  • Slicing & Edge Security: Verifying slice isolation and container security in MEC (Edge Computing)environments.

Szklane odbicie wieżowca
Przegląd zakładu przemysłowego

Cyber Buzdygan

Unique defense against unconventional unmanned systems 

Direct response to a new era of aerial threats

Ineffectiveness of legacy C-UAS – Traditional solutions fail against non-standard platforms built from commercial off-the-shelf (COTS) components.

​

 

Dedicated FPV protection – A specialized approach tailored to counter First Person View drones and modified unmanned systems.

​

Advanced RF security – Instant band identification and precise signal neutralization.

Threat Profile:
Why Legacy Systems Fall Short?

Currently available C-UAS solutions are tailored specifically for mainstream commercial platforms (e.g., the DJI series). They exploit known vulnerabilities in factory firmware, enabling authorities to intercept and seize control.

Modern DIY drones, often repurposed as offensive strike platforms, present a distinct set of challenges:

1 / No reliance on geolocation systems 

Operating primarily in full manual mode with no onboard GPS, these platforms render standard navigation warfare tactics—like GPS jamming and spoofing—completely obsolete.

2 /Operation Across a Broad RF Spectrum

DIY platforms leverage a wide array of unconventional frequencies. This hardware versatility enables them to easily circumvent legacy sensors calibrated solely for standard commercial bands.

3 /No Manufacturer Restrictions

Unlike commercial drones, DIY builds feature no artificial limitations or geofencing blocks, granting them unrestricted access to critical zones.

4 /No Integrated Identification Protocols

Neither identification telemetry nor the physical location of the drone and pilot is ever transmitted.

Limitations of Legacy Jamming Systems

Conventional C-UAS primarily depends on brute-force RF jamming—a tactic burdened by severe limitations that severely restrict its real-world use:

​

  • High-power broadband jamming in urban settings, public spaces, or around critical assets causes immediate collateral damage, blacking out authorized civilian hardware and first-responder communications sharing the same spectrum.

​

  • Given this high risk of operational disruption and regulatory fallout, traditional jammers are strictly non-viable in many deployment scenarios.

Core Technology: Cyber Precision Over Brute Force

The Cyber Buzdygan system completely moves away from broad RF spectrum jamming, leveraging offensive cyber techniques alongside advanced radio frequency engineering.

Instead of generating RF noise, Cyber Buzdygan operates with surgical precision:

​

  • Passive Analysis: Continuously monitors the radio spectrum for distinct communication protocols utilized by FPV drones.

​

  • Vulnerability Exploitation: Leverages proprietary, critical zero-day/implementation flaws identified within publicly available RF protocols.

​

  • Selective Neutralization: Transmits precision-crafted data packets to surgically terminate the communication session between the operator and the target drone, resulting in immediate defeat.

Cyber Buzdygan: Core Operational Advantages

  • Unmatched Effectiveness Against DIY and Low-Cost Platforms:

    Resolves the vulnerability posed by targets undetectable to conventional systems—threats built from budget off-the-shelf components running open-source software.

​

  • Surgical Operational Precision:

    Intervenes exclusively at the target drone's protocol level. By eliminating wideband RF noise emission, it guarantees zero collateral interference with surrounding telecommunications infrastructure and co-channel devices.

​

  • Operational Viability in Dense RF Environments:

    Can be seamlessly deployed across public venues, dense urban centers, and mass-gathering events without disruption.

​

  • Instantaneous Detection:

    Instantly identifies and decodes supported communication protocols across selected bands—delivering a decisive advantage over legacy systems that rely on imprecise, time-intensive spectrum correlation.

​

  • Satellite Navigation Independence:

    Maintains complete operational efficacy against targets operating without GPS/GLONASS navigation receivers.

bottom of page