Sprocket Security
Latest Resources
2023 Ransomware Examples
Ransomware has emerged as one of the most common and damaging malware threats in recent years. In fact, the volume and expense of ransomware attacks have caused some insurers to exclude them from cybersecurity coverage.… read more →
What is attack surface management?
Attack surface management is a security solution that provides vulnerability monitoring across your digital and physical assets. read more →
Artificial Intelligence in Cyber Security
AI will almost certainly become a central part of the SOC of the future. However, it’s important to ensure that this AI is well-trained and to address the potential for attacks specifically targeting these AI systems. read more →
Network penetration testing: what is it and why do you need it?
How your business will benefit from network penetration testing and why it’s important to conduct annual testing. read more →
What are breach and attack simulations?
Regular BAS exercises can be a valuable tool to improve an organization’s security posture and protect against cyber threats. In the long run, finding and fixing vulnerabilities in an exercise is cheaper and safer than… read more →
Discovering wp-admin.php URLs in Wordpress With GravityForms
By targeting a specific endpoint and passing in a random string, GravityForms will prompt users to authenticate first. This results in the unauthenticated user being redirected to the obscured administrative login page… read more →
cURL For The Pentester: Above & Beyond
Did you know you can interact with LDAP using cURL? How about NTLM, proxy tunneling, or domain sockets? A deep dive into some less common and advanced features of cURL, including sending POST requests with a payload… read more →
How to Prepare for Penetration Testing
Preparing for a penetration test? This checklist will inform you on what to expect and what steps you should take to get the most out of your organization’s upcoming pentest. read more →
Password Spraying Self-Hosted Microsoft Services
Self-hosted Microsoft services, such as Exchange and Skype for Business, are ideal targets for password spraying attacks. Learn more about how these threats work and how to protect your business. read more →
A Showcase of the Top OWASP Risks
Exploiting several Top 10 risks using the Damn Vulnerable Web Application (DVWA), as it’s expressly configured to highlight sub-optimal cybersecurity practices relevant to modern web applications. read more →
Tools for Evading External Network Security Controls
Offensive operations require evasion techniques to bypass security controls. Testers will often find that their attacks against web applications, Office 365, and other external endpoints are quickly blocked. Read our… read more →
The Best Penetration Testing Tools & Learning Resources for 2022
Learn penetration testing best practices from industry pros to prevent breaches, reduce exposure, and keep your digital assets secure. read more →
Continuous Human & Automated Security
The Expert-Driven Offensive
Security Platform
Continuously monitor your attack surface with advanced change detection. Upon change, testers and systems perform security testing. You are alerted and assisted in remediation efforts all contained in a single security application, the Sprocket Platform.
Expert-Driven Offensive Security Platform
- Attack Surface Management
- Continuous Penetration Testing
- Adversary Simulations