Find the latest Webinar content from the Sprocket Testing Team.

Blog

Stay updated with the latest offensive security news, knowledge, and resources.

Latest Resources

Network penetration testing: what is it and why do you need it?
Jun 08, 2023 Sprocket Security

Network penetration testing: what is it and why do you need it?

How your business will benefit from network penetration testing and why it’s important to conduct annual testing.
What Are Breach and Attack Simulations?
Apr 28, 2023 Sprocket Security

What Are Breach and Attack Simulations?

Regular BAS exercises can be a valuable tool to improve an organization’s security posture and protect against cyber threats. In the long run, finding and fixing vulnerabilities in an exercise is cheaper and safer than discovering them when an attacker exploits.
Discovering wp-admin.php URLs in Wordpress With GravityForms
Apr 05, 2023 Juan Pablo Gomez Postigo

Discovering wp-admin.php URLs in Wordpress With GravityForms

By targeting a specific endpoint and passing in a random string, GravityForms will prompt users to authenticate first. This results in the unauthenticated user being redirected to the obscured administrative login page for /wp-admin.
cURL For The Pentester: Above & Beyond
Mar 03, 2023 Nate Fair

cURL For The Pentester: Above & Beyond

Did you know you can interact with LDAP using cURL? How about NTLM, proxy tunneling, or domain sockets? A deep dive into some less common and advanced features of cURL, including sending POST requests with a payload file, uploading files to a server, exploiting Spring4Shell, and exploiting SQL injection vulnerabilities using cURL.
How to Prepare for Penetration Testing
Feb 01, 2023 Sprocket Security

How to Prepare for Penetration Testing

Preparing for a penetration test? This checklist will inform you on what to expect and what steps you should take to get the most out of your organization’s upcoming pentest.
Password Spraying Self-Hosted Microsoft Services
Jan 09, 2023 Sprocket Security

Password Spraying Self-Hosted Microsoft Services

Self-hosted Microsoft services, such as Exchange and Skype for Business, are ideal targets for password spraying attacks. Learn more about how these threats work and how to protect your business.