Defeating the Russians through Cybersecurity
100+
Apps Integrations
250k
Total App users
3M
Total Fundings
40+
Team Members
DOWNLOAD FULL CASE STUDYIntroduction/Overview
The 2022 Russia-Ukraine Conflict created new threats to cybersecurity, not just abroad, but in the US as well.
An energy company (who’s real name is kept private for security reasons) sought out Red Sentry’s help to test their cyber environment and stay secure from the most common vulnerabilities Russian hackers were using.
Challenge
In early 2022, Russian state-sponsored hackers began specifically targeting US energy companies, which posed a serious threat to American infrastructure.
The FBI and other government entities warned these companies of DDoS attacks (distributed denial), which interrupt services and are especially detrimental to companies in the energy, gas and oil industries.
At the same time, organizations like our client have a hard time finding offensive cybersecurity companies they can trust because of the sensitive nature of their data.
Solution
The energy company engaged with Red Sentry and other providers to find the best partner for them, and after thorough due diligence decided that they wanted to entrust Red Sentry with this large penetration testing project.
Red Sentry was scanned through BitSight and found to be a secure vendor option.
Red Sentry conducted a penetration test of their entire environment to identify vulnerabilities and weaknesses
Findings
167 TOTAL FINDINGS were uncovered by our team of experts.
Among numerous other findings, Red Sentry was able to gain access to all phones and conference sessions within the organization.
The findings have since been remediated and retested, shoring up the environment and hardening the target from external hackers.
Benefits
With attacks coming from all angles, it’s hard to gain peace of mind in this era.
Our client can now feel secure knowing that they have a strong environment, and continue to focus on serving the public with the energy they need.
Result
Not only did the organization get a thorough penetration test that led them to find and remediate vulnerabilities, but they’re now using Red Sentry’s continuous vulnerability platform on a daily basis, so that if a new vulnerability pops up, they’ll be ready.
Red Sentry is quickly becoming the partner of choice for growing businesses.
Case Review
A large US energy company partnered with Red Sentry to protect itself from Russian hacking trends.
Case Timeline
May - August 2022
Industry
Energy and Oil Penetration Testing
How we helped
- 167 TOTAL FINDINGS were uncovered by our team of experts.
- Red Sentry was able to gain access to all phones and conference sessions within the organization.
- The findings have since been remediated and retested, shoring up the environment and hardening the target from external hackers.
More Case Studies
See how we compare
We strive to bring the best pentest solution, for the cheapest price. And did we mention that we are fast?
Other Pentest Solutions
Red Sentry
Medium
Check out what's hot now.
We have been making offensive cybersecurity YouTube videos and would love to share our knowledge with you!
Watch YouTube
What Results You Can Expect
Below are just some of the reasons why you should choose Red Sentry.
We make the process smooth. We have no lead times (for those ASAP pentests).
Your PM will communicate with your team throughout the pentest process.
There are no hidden fees or overage fees. The price you see, is what you get.
We offer a retest once you patch up any vulnerabilities.
We make pentesting affordable by cutting out any fluff hourage.
We report all criticals and highs to your team immediately during testing.
You're in Good Hands
Save time, avoid false positives, truly operationalize security, and manage costs.
Rated 4.8 on G2 & Capterra
Don't know what you need?
Check out our pentesting options below.
Once access to the mobile application is granted, all of the models/API endpoints are enumerated, if applicable, the source code is analyzed to look for misconfigurations and sensitive data exposed, the technology stack used is analyzed as well to look for potential CVEs, and the permissions schema is tested to look for broken access controls and privilege escalation possibilities. Overall, the test is conducted following the OWASP Top 10 Mobile methodology.
After scoping, the assessment team tries to access every page of the application and look for the different requests made. From that list, a set of possible attacks is made and then executed to prove impact. A usual requirement here is to look for vulnerabilities that allow a basic user to access either to an admin’s or to another user’s data.
A cloud engagement will look for different misconfigurations inside a Cloud environment that can turn a malicious insider task much easier. The assessment team will look for issues related to the authentication mechanism being used and the virtual assets inside the infrastructure, like database instances, containers, storage buckets and running applications. We will need access to the cloud environment with read only or security audit access to conduct testing. After we gain access to the Cloud, we run a couple of tools to look for both technical and user-generated misconfigurations.
After scoping, an asset discovery is performed to collect all of the active host + port combinations. Once done, we start looking for potential exploits either by searching CVEs associated with the technology stack behind the service running on a certain port, or by performing a set of standard attacks.
Additionally, we look for breached credentials which are still valid on different platforms.
We use different techniques to map the
inside network and then go through a discovery process where we look for privilege
escalation, targets for brute-force attacks, control over traffic data and common
vulnerabilities which could give us access to sensitive information that a regular
user shouldn’t have access to. Depending on the approach chosen, those
vulnerabilities could then be exploited as well.
Get a custom ROI Calculation of a Pentest
Rated 4.8 on G2 & Capterra
-76.svg)
-87.svg)
-86.svg)
-55.svg)
-77.svg)
Copyright © Red Sentry 2022
