Overview
News
Technologies
Salaries
Products
People
Growth
Financials
Overview
We hack things. Pentagrid performs technically solid security assessments of IT systems for enterprises.
News
Security misconfiguration in IKEA DIRIGERA smart hub web server exposes large parts of the root filesystem (GCVE-2342-2026-1)
IKEA produces smart home devices and their newest generation uses the central DIRIGERA smart hub . After extracting the firmware, we started hunting for vulnerabilities of the device and found: An unauthenticated attacker on the network can download large
Read more
Report
Parsing modern ASP.NET Core Identity password hashes to Hashcat
While this would not be anything out of the ordinary, the environment certainly was. So where do we expect ASP.NET Core Identity hashes? Some obscure cloud application, local Windows application, ... but surely not on an embedded linux system!? While the
Read more
Report
ISO 20022, Pain001 and payment of your salary
At Pentagrid, we occasionally review our clients' internal processes to identify IT security risks. When we discovered that large sums of money are transferred with just a few clicks and no transaction verification, we helped securing the process. At the
Read more
Report
An excursion into Airlock WAF ruleset testing
Recently we've been tasked to do an analysis of a web application firewall (WAF) of the vendor Ergon, namely the Airlock WAF regarding the effectivness of filtering. One idea was to see what happens when OWASP Core Rule Set (CRS) tests are run against it.
Read more
Report
EAN-13- und TOTP-Hackvertor-Tags für Penetrationstests von Webanwendungen mit Burp
Hackvertor ist ein Standalone-Werkzeug und eine Erweiterung für das Penetrationstest-Tool Burp Suite . Gareth Heyes vom Portswigger Research Team hat Hackvertor entwickelt. Die Erweiterung führt dynamische Datenkonvertierungen durch. Das Tool kann beispie
Read more
Report
Pro access
Upgrade to see all 30 mentions
Upgrade to a paid plan to read every media mention of this company - funding news, awards, product launches and press releases from all the outlets writing about it.
Every media mention and press release
Funding news, awards and product launches
Fresh coverage from every outlet writing about the company
Upgrade now
Cancel anytime. Secure checkout. Instant activation.