Edu Bolaji
Independent Penetration Tester & Founder, UltEnterprise
Canterbury, United Kingdom
Actions
Bolaji Edu is an independent penetration tester and founder of
UltEnterprise, a cybersecurity consultancy delivering security
assessments to SME and fintech clients across the UK. He holds a
2:1 BSc in Cybersecurity from the University of Kent and is PNPT
certified. His work spans web application security, Active Directory
attack simulation, and ICS and IoT security assessments. He publishes
open source security tooling and research at github.com/BolajiEdu and
has had cybersecurity articles published in the national press.
Area of Expertise
The Easiest Way Into Your Network Is the Device Nobody Secured
Most penetration testers spend hours trying to break through firewalls
and web application defences. In a recent engagement through my
consultancy UltEnterprise, the hardest part was choosing which IoT
device to start with.
This talk walks through a real penetration test of a UK solar energy
company where IoT monitoring devices running factory default credentials
provided direct lateral movement into internal systems, bypassing every
other security control in place.
I will cover the reconnaissance methodology used to identify the devices,
why IoT assets are consistently the weakest point in otherwise well
defended networks, and what developers and security teams can do right
now to address this. The session ends with a demonstration of CVEScan,
an open source CVE verification tool built to help organisations find
and confirm these vulnerabilities before attackers do.
Takeaways: a practical checklist for IoT security hygiene, a framework
for assessing OT and ICS environments, and a free open source tool to
start identifying exposure immediately.
Please note that Sessionize is not responsible for the accuracy or validity of the data provided by speakers. If you suspect this profile to be fake or spam, please let us know.
Jump to top