A new Kerberos delegation abuse path: combine Reflective RBCD, U2U, and an Impacket S4U2Proxy extension to exploit constrained delegation without an SPN.
Resources
Blog
Vulnerability Management
Keep up to date with the latest offensive security news, knowledge, and resources.
Four botnets. Three million devices. The same IoT vulnerabilities security teams have deprioritized for years. What defenders keep getting wrong.
Your pentest scope might be missing the biggest risk in your environment: your vendors. See the data and what to do about it.
Emerging React and Next.js vulnerabilities (CVE-2025-55182, CVE-2025-66478): what Sprocket Security is seeing, current detection coverage, and guidance for teams.
A vulnerability assessment identifies and evaluates potential security weaknesses in an organization's systems.
Sprocket Security CEO Casey Cammilleri gives an inside look into the launch of Sprocket Attack Surface Management tool.
