Research
Resources Blog

Research

Keep up to date with the latest offensive security news, knowledge, and resources.
Directory Brute-forcing at Scale
Feb 15, 2024

Directory Brute-forcing at Scale

Tools such as dirbuster, gobuster, feroxbuster, dirb, and ffuf have been instrumental in uncovering hidden content on websites. These tools and wordlists designed to discover files and directories have become staples in the toolkits of penetration testers and bug bounty hunters. Now more than ever, technology plays a vital role in cybersecurity practices.
Introducing Security Testing in QA
Jan 10, 2024

Introducing Security Testing in QA

Fixing these vulnerabilities in production is more expensive than finding and fixing them earlier in the SDLC. One way that organizations can drive down the cost of vulnerability management is by integrating security testing into software quality assurance (QA) testing.
Surfacing the Invisible: A Guide to Web Application Attack Surface Management
Dec 05, 2023

Surfacing the Invisible: A Guide to Web Application Attack Surface Management

The top five web application-specific attack surface management opportunities Sprocket Security sees regularly.
What is the Difference Between Vulnerability Scanning and Penetration Testing?
Nov 10, 2023

What is the Difference Between Vulnerability Scanning and Penetration Testing?

In cybersecurity, various tools and strategies are at organizations' disposal to enhance their overall security posture. Among these, two frequently misunderstood strategies are vulnerability scanning and penetration testing. This article delves deep into these two approaches, shedding light on their distinct characteristics and highlighting the key differentiators that set them apart.
2023 Ransomware Examples
Sep 12, 2023

2023 Ransomware Examples

Ransomware has emerged as one of the most common and damaging malware threats in recent years. In fact, the volume and expense of ransomware attacks have caused some insurers to exclude them from cybersecurity coverage. Read on to learn more about the top 2023 ransomware attacks and how to protect yourself and your company.
What is attack surface management?
Jul 20, 2023

What is attack surface management?

Continuous monitoring of an organization’s attack surface – digital and physical assets that connect to the internet – is possible with attack surface management.
1 2 3 4