Exploitation

Exploitation Resources

Exploitation

Latest Exploitation Resources

A Vulnerability Hunter's View of Next.js (CVE-2025-29927) Exploit Validation
Mar 27, 2025 Nick Aures

A Vulnerability Hunter's View of Next.js (CVE-2025-29927) Exploit Validation

Explore a security expert's take on validating the Next.js CVE-2025-29927 exploit, its impact, and techniques for assessing and mitigating the risk.
Social Engineering: 9 Attack Techniques and 6 Defensive Measures
Dec 11, 2024 Sprocket Security

Social Engineering: 9 Attack Techniques and 6 Defensive Measures

Social engineering is a method used to manipulate people into divulging confidential information, enabling unauthorized access, or deploying malware.
Large Language Model (LLM) Security Testing: Types, Techniques, and Methodology
Oct 01, 2024 Sprocket Security

Large Language Model (LLM) Security Testing: Types, Techniques, and Methodology

Get ready to learn the importance of LLM (Large Language Model) security testing, a vital process for identifying vulnerabilities in AI models, especially those integrated into web applications. The need for early detection of potential risks like unauthorized data access, prompt injection attacks, and remote code execution is more crucial than ever.
From Twitter to Exploit: The Sprocket Security Lifecycle of Exploitation
May 16, 2024 Nate Fair

From Twitter to Exploit: The Sprocket Security Lifecycle of Exploitation

Our approach to mass exploitation of the latest and greatest vulnerability. On the chopping block, this time around: CVE-2024-3400.
cURL For The Pentester: Above & Beyond
Mar 03, 2023 Nate Fair

cURL For The Pentester: Above & Beyond

Did you know you can interact with LDAP using cURL? How about NTLM, proxy tunneling, or domain sockets? A deep dive into some less common and advanced features of cURL, including sending POST requests with a payload file, uploading files to a server, exploiting Spring4Shell, and exploiting SQL injection vulnerabilities using cURL.
A Showcase of the Top OWASP Risks
Dec 20, 2022 Sprocket Security

A Showcase of the Top OWASP Risks

Exploiting several Top 10 risks using the Damn Vulnerable Web Application (DVWA), as it’s expressly configured to highlight sub-optimal cybersecurity practices relevant to modern web applications.
1 2 3 »