Sprocket Security
Latest Resources
How to Prepare for Penetration Testing
Preparing for a penetration test? This checklist will inform you on what to expect and what steps you should take to get the most out of your organization’s upcoming pentest.
Read more
Password Spraying Self-Hosted Microsoft Services
Self-hosted Microsoft services, such as Exchange and Skype for Business, are ideal targets for password spraying attacks. Learn more about how these threats work and how to protect your business. read more →
A Showcase of the Top OWASP Risks
Exploiting several Top 10 risks using the Damn Vulnerable Web Application (DVWA), as it’s expressly configured to highlight sub-optimal cybersecurity practices relevant to modern web applications. read more →
Tools for Evading External Network Security Controls
Offensive operations require evasion techniques to bypass security controls. Testers will often find that their attacks against web applications, Office 365, and other external endpoints are quickly blocked. Read our… read more →
The Best Penetration Testing Tools & Learning Resources for 2022
Learn penetration testing best practices from industry pros to prevent breaches, reduce exposure, and keep your digital assets secure. read more →
The Top 7 Most Exploitable CVEs in 2022
Vulnerability management can be an overwhelming task with so many new vulnerabilities identified each year. Learn about the top vulnerabilities of 2022, which should be at the top of your patch priority list. read more →
Top Information Security News Resources - 2022
Cybersecurity is a fast-changing field, and staying up-to-date on emerging trends and the ever-shifting threat landscape is vital to protecting your data. Fortunately, the internet is home to a profusion of information… read more →
Why no Workstation Needs Inbound SMB
Know the risks and attack vectors associated with allowing inbound SMB port connectivity to workstations with an emphasis on lateral movement tools and techniques. See how Continuous Penetration Testing is highly useful… read more →
How To Securely Share Your Backups and Passwords Upon your Death
A tutorial on how to build a secure, distributed, and multiple authorization backup method to recovery your digital life. read more →
Should I Complete Network Security Tests Only Once a Year?
See the infographic on the costly consequences of completing network security tests only once a year. Learn how continuous penetration testing will save you money year-round. read more →
Creating a CVE Trends Command Line Tool
How to create a CVE Trends Command Line Tool and be notified in Slack via Webhooks. read more →
Exploiting N-Day Vulnerabilities at Scale with CPT
A basic guide on how Sprocket utilizes Continuous Penetration Testing to rapidly identify and exploit vulnerabilities. read more →
Protect your company with Sprocket
Know your threats when they emerge.
When your environment changes, or new threats affect your attack surface, we perform security testing. There is a lot more value from this modern approach to testing.
Continuous Penetration Testing Subscription
- Pentests
- Web App Testing
- Red Teaming
- Social Engineering
- Adversary Simulations