Continuous Penetration Testing

Continuous Penetration Testing Resources

Continuous Penetration Testing

Latest Continuous Penetration Testing Resources

Forbidden! Are 403 bypasses worth looking for?
Aug 28, 2024 Nicholas Anastasi

Forbidden! Are 403 bypasses worth looking for?

403 status code bypasses might seem niche and impractical at first glance, but they can be surprisingly valuable for uncovering vulnerabilities at scale. This blog delves into the nuances of 403 bypass techniques, exploring how tools like Nuclei and Burpsuite can be leveraged to identify hidden admin panels and other restricted areas, even when traditional methods fall short.
PCI DSS 4.0 and a Continuous Offensive Security Strategy
May 16, 2024 Greg Anderson

PCI DSS 4.0 and a Continuous Offensive Security Strategy

In the ever-evolving landscape of cybersecurity, organizations are constantly challenged to protect their sensitive data. The Payment Card Industry Data Security Standard (PCI DSS) version 4.0 is the latest iteration of security standards designed to ensure that all companies that accept, process, store, or transmit credit card information maintain a secure environment.
Zip Slip Exploitation in File Uploads with Hackvertor
May 09, 2024 Will Vandevanter

Zip Slip Exploitation in File Uploads with Hackvertor

Custom Tags are one of Hackvertor's most powerful features. They allow you to run Python, Java, or JavaScript with a one-liner inside any Burp request. In this blog post, we will discuss performing Zip Slip testing with a custom Hackvertor tag.
Introduction to the Ticketing SaaS Landscape
Apr 17, 2024 Nate Fair

Introduction to the Ticketing SaaS Landscape

The shift to remote work has led to significant changes in organizational dynamics and technology infrastructure, particularly in ticketing, help desk, and management platforms. Sprocket pentesters focus on evaluating the security risks associated with these evolving systems, especially in external SaaS environments where the impact can be substantial.
Mergers & Acquisitions Risk Management with Continuous Offensive Security
Nov 28, 2023 Sprocket Security

Mergers & Acquisitions Risk Management with Continuous Offensive Security

Cybersecurity risks are growing exponentially, making a continuous penetration testing solution and risk evaluation necessary during a merger and acquisition transaction.
Should I Complete Network Security Tests Only Once a Year?
Sep 26, 2022 Sprocket Security

Should I Complete Network Security Tests Only Once a Year?

See the infographic on the costly consequences of completing network security tests only once a year. Learn how continuous penetration testing will save you money year-round.
« 1 2 3 4 5 »