Sprocket Security | Resources
Resources
All Resources

Library

Explore our collection of resources, including blog articles, webcasts, case studies, and eBooks.
Pwning SPA’s With Semgrep
May 30, 2024

Pwning SPA’s With Semgrep

Semgrep, or Semantic Grep (For Code) should be a part of your pentesting toolkit. If you think otherwise, read on to see why.
Farmers Alliance Mutual Insurance Improves Security Posture with Sprocket
May 21, 2024

Farmers Alliance Mutual Insurance Improves Security Posture with Sprocket

Farmers Alliance Mutual Insurance is on a mission to insure and protect futures in rural communities. The insurance industry works with highly sensitive data and customers trust it will be protected. Farmers Alliance Mutual Insurance partners with Sprocket Security to improve their security posture and enhance their penetration testing efforts by using Continuous Penetration Testing.
PCI DSS 4.0 and a Continuous Offensive Security Strategy
May 16, 2024

PCI DSS 4.0 and a Continuous Offensive Security Strategy

In the ever-evolving landscape of cybersecurity, organizations are constantly challenged to protect their sensitive data. The Payment Card Industry Data Security Standard (PCI DSS) version 4.0 is the latest iteration of security standards designed to ensure that all companies that accept, process, store, or transmit credit card information maintain a secure environment.
From Twitter to Exploit: The Sprocket Security Lifecycle of Exploitation
May 16, 2024

From Twitter to Exploit: The Sprocket Security Lifecycle of Exploitation

Our approach to mass exploitation of the latest and greatest vulnerability. On the chopping block, this time around: CVE-2024-3400.
Zip Slip Exploitation in File Uploads with Hackvertor
May 09, 2024

Zip Slip Exploitation in File Uploads with Hackvertor

Custom Tags are one of Hackvertor's most powerful features. They allow you to run Python, Java, or JavaScript with a one-liner inside any Burp request. In this blog post, we will discuss performing Zip Slip testing with a custom Hackvertor tag.
Ascendium Education Group Continuously Secures Their Evolving Technology with Sprocket
Apr 23, 2024

Ascendium Education Group Continuously Secures Their Evolving Technology with Sprocket

Ascendium is on a mission to make education and training beyond high school a reality for learners from low-income backgrounds. Handling highly sensitive financial data for students means high-quality continuous security for its infrastructure. Ascendium partners with Sprocket Security to ensure their rapidly evolving technologies are being made as secure as possible using Continuous Penetration Testing.