Pentagrid AG @pentagridsec
Pentagrid performs technically solid IT security assessments. Mastodon: @[email protected] pentagrid.ch Buchs SG, Switzerland Joined May 2019-
Tweets53
-
Followers281
-
Following2
-
Likes7
A story about looking at the effectiveness of web application firewalls and finding bypasses for the filter ruleset. pentagrid.ch/en/blog/airloc… #WAF #OWASP #coreruleset #ergon #airlock
Pentagrid published two @hackvertor tags for #EAN13 (also Swiss AHV numbers) and #TOTP for #2FA. These tags are available via the Hackvertor Tag Store by @garethheyes . Our blog post explains what these tags do and how they can be used. pentagrid.ch/en/blog/hacker… #pentest #OWASP
Pentagrid is looking for an IT security analyst (d/f/m) in Buchs SG, Switzerland. pentagrid.ch/en/pages/caree…
If you want to protect your IT #infrastructure against #MITM attacks where an attacker bypasses domain verification to obtain valid certificates, you may want to use #CAA and #accountURI binding, which is easy to set up. pentagrid.ch/en/blog/domain… #hardening
It happened again. We accidentally broke another #hotel check-in #terminal. This time Mr O'Yolo triggered a problem, crashed the #Ariane Allegro Scenario Player and escaped the #kiosk mode, which enabled access to the Windows Desktop: pentagrid.ch/en/blog/ariane… #itsecurity #infosec
This is not a late April Fool's joke: After #37C3, we accidentally dumped the keypad codes of almost half of an IBIS hotel's rooms by entering some dashes into a check-in terminal: pentagrid.ch/en/blog/ibis-h… #itsecurity #infosec #ibis #accor #terminal #hotel
#SQLinjection in login dialog of web-based #YABOOK harbour administration allows authentication bypass pentagrid.ch/en/blog/sql-in… #pentest #sailing #hafenverwaltung #imonaboat
Multiple vulnerabilities in Lantronix EDS-MD IoT gateway for medical devices: pentagrid.ch/en/blog/multip… #itsecurity #infosec #pentesting #lantronix #iot #medical
A few email-related Python libraries do not check server certificates. It is nothing new, but a bit surprisingly in 2023 and not everyone got the memo. pentagrid.ch/en/blog/python… #itsecurity #infosec #pentesting #python #email #bugbounty
The #Liferay Portal software < 7.4.3.88 respectively < 7.4.3.92 is affected by persistent cross-site-scripting vulnerabilities. pentagrid.ch/en/blog/stored… #itsecurity #infosec #pentesting
Wir haben ein Werkzeug in Python geschrieben, dass Dateiarchive wie zip, tar und cpio generiert welche Path Traversal Angriffe beinhalten: pentagrid.ch/de/blog/archiv… #itsicherheit #informationssicherheit #pentesting
We wrote a tool in Python to create file archives such as zip, tar and cpio that include path traversal attacks: pentagrid.ch/en/blog/archiv… #itsecurity #infosec #pentesting
We analysed the security of a #WindRiver #vxworks (the operating system running also on NASA's Curiosity mars rover) embedded device and found a critical vulnerability in the #tarExtract function: pentagrid.ch/en/blog/wind-r… #itsecurity #infosec #pentesting #cisa #vxworks
Wir haben uns das Liechtensteiner #Gesundheitsdossier und die zugrunde liegende Portal-Software #Liferay angeschaut. Im Ergebnis haben wir Verwundbarkeiten in Liferay gefunden und Schwächen im IT-Setup: pentagrid.ch/de/blog/it-sic… #itsicherheit #informationssicherheit #eHealth #eGD
We had a look at Liechtenstein's electronic health files and the underlying #Liferay portal software and found some weaknesses in the portal software as well as risks in the IT setup. Full article (in German only): pentagrid.ch/de/blog/it-sic… #itsecurity #infosec #eHealth #eGD
For some #Icinga #monitoring, we wrote a small plugin in Python that sends mail via SMTP and checks on another mail server via IMAP if the mail was received. Here is the code: github.com/pentagridsec/i…
Our advisory for Busybox cpio. When extracting cpio archives with BusyBox cpio, the cpio archiving tools may write files outside the destination directory and there is no option to prevent this. Full advisory: pentagrid.ch/en/blog/busybo… #itsecurity #infosec #pentesting #Busybox
Nicolas Krassas @Dinosn
146K Followers 735 Following Head of Threat & Vulnerability Mgmt @ Henkel AG & Co. KGaA https://t.co/NC1orlKrW3
knecht - Ⓐ @anarknecht
147 Followers 1K Following Früh verkanntes Wunderkind mit Münchhausen Syndrom
yeshuibo @yeshuibo
106 Followers 6K Following
Sandro Affentranger @0xAF5A
31 Followers 345 Following Swiss Penetration Tester & Red Teamer, Password Cracker, Team HashMob
David Cyber Security @InspiringRiots
503 Followers 5K Following Cybersecurity, IT, Technology... hopefully!
Moroco @xmoroco
79 Followers 1K Following Pentester Jr | BugHunter | Studying Portuguese and Russian | Pretending to be a hacker 🥷
wario @wario10
11 Followers 241 Following
a solitary soul thriv... @0xsuperdemon
90 Followers 2K Following Unreadiness to following, reluctant to followers. A visionary path treader, rethinker, and on a second thought life overwhelms me, I do not know anything, AMA!
f1tao @f1tao
4 Followers 152 Following
Sunny singh @sunnysitechie
271 Followers 4K Following
Shinobyx @crypticrebel337
23 Followers 1K Following Bug bounty hunter who is a bit inactive on social media, so don't expect too much from me here...
Jowin @jowin922
167 Followers 1K Following Newbie to Web App Security, Ranked 80th Web Security Researcher in Yeswehack, Top 5% in Tryhackme.
posthumangr.eth @posthumangr
139 Followers 913 Following I run things, i destroy things #cybersecurity #OSINT #CTI #FreeBSD #DFIR #SANS #ENISA $ENS #ENSDAO $ETH
Garth Boyd is on Blue... @garthoid
637 Followers 3K Following Father,Husband,Software Security Architect,Ethical Hacker,Musician,& Karate Geek.OWASP Ottawa Chapter Leader. @garthoid.bsky.social, @[email protected],
Sitalu @Sitalu7
0 Followers 1K Following
Amol 🇮🇳 @codewithamol
1K Followers 5K Following My name is Amol from India.I am dad,husband and Hacker C|EH | eWPTX | CC | CSSLP | CISSP | CDP DevSecOps |Security Consultant |B.E Computer | MBA IT
Jorgo Ananiadis 🪠 @JorgoA
1K Followers 3K Following pragmatisch. rational. familiär. Unternehmer. Projektleiter. Solarplaner. Dozent. GGR @gostermundigen. Präsi @ppsde + @ppsbe.
Black Gang @black42creed
24 Followers 499 Following
0xcafebabe @euT0k1To
211 Followers 244 Following Ouvindo a vida gritar desiste e a morte sussurrar continue.
Ryan Armstrong @ryarmst
3K Followers 2K Following Public health advocate. PhD Biomedical Eng. AppSec professional. Teach @fanshwecollege. AppSec YouTube: https://t.co/S9qqPmSHI0
r ██████�... @redactedio
192 Followers 4K Following Follow me for the latest updates on local, regional, and global cyber security issues! 🚀
hispoon @hispoon_
4 Followers 29 Following
Alex @Alex11240648
2 Followers 280 Following
Metracon AG @metracon_ag
20 Followers 130 Following We specialize in operating Oracle® and OneStream® business applications. 100% Swiss quality. For realtime status updates follow @metracon_status
Pirmin Schmid @pisch9
257 Followers 921 Following Physician (Dr. med.), Software Engineer (MSc ETH Computer Science), Scientist.
TomU | I'm still here... @c_APT_ure
8K Followers 6K Following #InfoSec professional, husband & father of two (in random order). #BlueTeam #DFIR #APT #CTI #RedTeaming #BSidesZH (RT/Likes ≠ endorsement) 👀➡️#MalwareChallenge
Lukas Hess @HessLukas
386 Followers 792 Following i study how activists use technology and how technology is used against them. partner @dezentrumCH think & do tank. phd @uzh_ikmz internet use & society. he/him
GBaudoin @gbaudoin
319 Followers 521 Following Earthling on a mission to Cyberspace. @[email protected]
Luke Burnett @lukeburnett
30 Followers 556 Following
dandannu @dandannuu
10 Followers 306 Following
Gg ww @Ggww52373463
18 Followers 534 Following
Jim Plunkett 🛡️ @jplunkett
195 Followers 536 Following JPlunkett Group, LLC. Management in the Moment - Zanshin Leadership. Consulting and Coaching. Aikido, Zen. Crypto Explorer, AI Dabler
Tomas Zatko @wo__ody
722 Followers 1K Following Human (AFAIK) / @citadelo / @binaryconf / #Security / #Cybersecurity / Embracing #AI / #RWRI
am @am0o01o1
37 Followers 2K Following
PUPUWEB Blog @cheinyeanlim
3K Followers 3K Following Solution Consultant, Digital Content Developer, Tech Blogger, Photographer, Husband and Father of 2.
zqtwiter @zqtwiter
10 Followers 426 Following
rmishra_2022 @Rmishra2022
11 Followers 254 Following
Wael @waelsec
0 Followers 2K Following
Martin Schobert - @ni... @nitram2342
406 Followers 562 Following Kezboard Cowboy, Programming Robot & Functional Unit. Co-Founder of @pentagridsec. All we are saying is give peace a chance. Mastodon: @[email protected]Trends for United States
You might like
