IoT Penetration Testing
Uncover vulnerabilities in your Smart Devices and fix them quickly
Our Methodology
CTD’s approach to IoT, Smart Devices pentest includes Hardware, Software and Server assessment
Firmware Reverse Engineering
Reverse engineering firmware binaries
Binary exploitation
Encryption analysis
Bypass obfuscation techniques in use
Debugging binaries to gain sensitive info
Application Pentesting
Android, Cloud and Web vulnerability testing
Input Validation: SQL Injection, Malicious Input acceptance, Command Injection
Buffer Overflow, File Upload, Business logic validations, Error handling/ Info Leakage, Session management, Log tampering
Data storage vulnerabilities
Server side Testing
Identify potential for denial of service (DOS) attacks
Vulnerabilities specific to web servers: Directory Traversal, Command injection, Remote code execution, SQL injection, Sensitive file exposure, Web server miss configuration exploitation
API/Webservices testing: authorization, IDOR, Injections and exploits, API business logic bypas like skipping payments, API missconfigurations
Radio communication reversing for proprietary protocols
Hardware based exploitation
Exfiltration of Sensitive data from memory: applications store username, tokens, passwords, encryption keys, unscripted sensitive data.
UART, JTAG, SWD ports exploitation
Flash memory chips to detect a possibility to dump firmware.
Logic bugs sniffing and bus tampering
External peripheral devices: headphones, antennas etc.
How it works
Contact us
Call us or write us an email with your requirements
Scoping
Establish what needs to be tested and the right approach
Attacking
We attack your devices to discover vulnerabilities
Reporting
We will present all the findings and solutions to fix them
Industries that we cover
Industry 4.0
Industrial Control Systems
Smart Home Automation
Medical / Healthcare
Automotive
Enterprise IoT
Certified Ethical Hackers
Highly Technical. Effective Communication. Trust
We are a security consulting company, founded by senior penetration testers and security managers, offering certified Cyber Security Services of highest quality possible, for clients in EMEA and Middle East
Who recommends us
The team is very professional, even going the extra mile caring for customer needs and all the details of the collaboration. This attention to detail both for the human factor and the technical expertise motivated me to have the ongoing project and wish to maintain this for the foreseeable future.
Catalin Priscornita
CEO, Blitz.ro
Cyber Threat Defense has been a valuable partner in securing our software. Their outside the box perspective has pointed us attack scenarios that we are now paying more attention to.
I recommend CTD. They will certainly improve the level of security in your company.
I recommend CTD. They will certainly improve the level of security in your company.
Adrian Andreias
CEO, hosterion.com
How can we help?
Contact our offensive security experts today to discuss your requirements
Care to be Cyber Aware!
