Unauthenticated SQL injection in mJobTime (CVE-2026-9209) exposes construction and field services data. No vendor fix exists after 120-day disclosure.
Resources
All Resources
Library
Explore our collection of resources, including blog articles, webcasts, case studies, and eBooks.
A new Kerberos delegation abuse path: combine Reflective RBCD, U2U, and an Impacket S4U2Proxy extension to exploit constrained delegation without an SPN.
Preparing for a penetration test? This checklist will inform you on what to expect and what steps you should take to get the most out of your organization’s upcoming pentest.
Apex, one of Sprocket's AI agents, found a session injection flaw in minutes. Human testers chained it into two zero-days.
How ASRepCatcher uses ARP poisoning to obtain crackable AS-REP hashes from any authenticating user, even when Kerberos preauthentication is enabled.
AI agents can accelerate testing, but they don’t eliminate the need for human judgment. Watch our discussion on accountability, oversight, and what it really takes to build trustworthy agentic pentesting.
