Blog

Stay updated with the latest offensive security news, knowledge, and resources.

Latest Resources

How to Prepare for Penetration Testing
Feb 01, 2023 Sprocket Security

How to Prepare for Penetration Testing

Preparing for a penetration test? This checklist will inform you on what to expect and what steps you should take to get the most out of your organization’s upcoming pentest.
Password Spraying Self-Hosted Microsoft Services
Jan 09, 2023 Sprocket Security

Password Spraying Self-Hosted Microsoft Services

Self-hosted Microsoft services, such as Exchange and Skype for Business, are ideal targets for password spraying attacks. Learn more about how these threats work and how to protect your business.
A Showcase of the Top OWASP Risks
Dec 20, 2022 Sprocket Security

A Showcase of the Top OWASP Risks

Exploiting several Top 10 risks using the Damn Vulnerable Web Application (DVWA), as it’s expressly configured to highlight sub-optimal cybersecurity practices relevant to modern web applications.
Tools for Evading External Network Security Controls
Dec 09, 2022 Nate Fair

Tools for Evading External Network Security Controls

Offensive operations require evasion techniques to bypass security controls. Testers will often find that their attacks against web applications, Office 365, and other external endpoints are quickly blocked. Read our guide outlining the tools we use here at Sprocket to help us effectively attack our client's infrastructure including Fireprox, proxybroker2 and http-proxy-ipv6-pool.
The Best Penetration Testing Tools & Learning Resources for 2022
Nov 11, 2022 Sprocket Security

The Best Penetration Testing Tools & Learning Resources for 2022

Learn penetration testing best practices from industry pros to prevent breaches, reduce exposure, and keep your digital assets secure.
The Top 7 Most Exploitable CVEs in 2022
Nov 04, 2022 Sprocket Security

The Top 7 Most Exploitable CVEs in 2022

Vulnerability management can be an overwhelming task with so many new vulnerabilities identified each year. Learn about the top vulnerabilities of 2022, which should be at the top of your patch priority list.