Author
Juan Pablo Gomez Postigo
Explore the author's collection.
Resources by Juan Pablo Gomez Postigo
Directory Brute-forcing at Scale
Tools such as dirbuster, gobuster, feroxbuster, dirb, and ffuf have been instrumental in uncovering hidden content on websites. These tools and wordlists designed to discover files and directories have become staples in… read more →
Introducing Security Testing in QA
Fixing these vulnerabilities in production is more expensive than finding and fixing them earlier in the SDLC. One way that organizations can drive down the cost of vulnerability management is by integrating security… read more →
Surfacing the Invisible: A Guide to Web Application Attack Surface Management
The top five web application-specific attack surface management opportunities Sprocket Security sees regularly. read more →
Mergers & Acquisitions Risk Management with Continuous Offensive Security
Cybersecurity risks are growing exponentially, making a continuous penetration testing solution and risk evaluation necessary during a merger and acquisition transaction. read more →
What is the Difference Between Vulnerability Scanning and Penetration Testing?
In cybersecurity, various tools and strategies are at organizations' disposal to enhance their overall security posture. Among these, two frequently misunderstood strategies are vulnerability scanning and penetration… read more →
What is a Security Risk Assessment?
Have you ever wondered how hackable your organization is? A security risk assessment will shine a light on any gaps, vulnerabilities, or regulatory compliance issues in your cyber security defenses. read more →
2023 Ransomware Examples
Ransomware has emerged as one of the most common and damaging malware threats in recent years. In fact, the volume and expense of ransomware attacks have caused some insurers to exclude them from cybersecurity coverage.… read more →
What is attack surface management?
Attack surface management is a security solution that provides vulnerability monitoring across your digital and physical assets. read more →
Artificial Intelligence in Cyber Security
AI will almost certainly become a central part of the SOC of the future. However, it’s important to ensure that this AI is well-trained and to address the potential for attacks specifically targeting these AI systems. read more →
Network penetration testing: what is it and why do you need it?
How your business will benefit from network penetration testing and why it’s important to conduct annual testing. read more →
What are breach and attack simulations?
Regular BAS exercises can be a valuable tool to improve an organization’s security posture and protect against cyber threats. In the long run, finding and fixing vulnerabilities in an exercise is cheaper and safer than… read more →
Discovering wp-admin.php URLs in Wordpress With GravityForms
By targeting a specific endpoint and passing in a random string, GravityForms will prompt users to authenticate first. This results in the unauthenticated user being redirected to the obscured administrative login page… read more →
Continuous Human & Automated Security
The Expert-Driven Offensive
Security Platform
Continuously monitor your attack surface with advanced change detection. Upon change, testers and systems perform security testing. You are alerted and assisted in remediation efforts all contained in a single security application, the Sprocket Platform.
Expert-Driven Offensive Security Platform
- Attack Surface Management
- Continuous Penetration Testing
- Adversary Simulations