Social Engineering Resources
Explore resources found within the Social Engineering and categories.
Latest Resources
Top Information Security News Resources - 2022
Cybersecurity is a fast-changing field, and staying up-to-date on emerging trends and the ever-shifting threat landscape is vital to protecting your data. Fortunately, the internet is home to a profusion of information… read more →
Why no Workstation Needs Inbound SMB
Know the risks and attack vectors associated with allowing inbound SMB port connectivity to workstations with an emphasis on lateral movement tools and techniques. See how Continuous Penetration Testing is highly useful… read more →
How to Share Passwords and Backups Securely Posthumously
A tutorial on how to build a secure, distributed, and multiple authorization backup method to recovery your digital life. read more →
Should I Complete Network Security Tests Only Once a Year?
See the infographic on the costly consequences of completing network security tests only once a year. Learn how continuous penetration testing will save you money year-round. read more →
Creating a CVE Trends Command Line Tool
How to create a CVE Trends Command Line Tool and be notified in Slack via Webhooks. read more →
Exploiting N-Day Vulnerabilities at Scale with CPT
A basic guide on how Sprocket utilizes Continuous Penetration Testing to rapidly identify and exploit vulnerabilities. read more →
Password spraying and MFA bypasses in the modern security landscape
Any offensive security operator will tell you that guessing employee credentials is key to compromising your customer’s network – and therefore highlighting vulnerabilities – during a cyber-security engagement. The… read more →
Crossing the Log4j Horizon - A Vulnerability With No Return
A vulnerability was recently disclosed for the Java logging library, Log4j. The vulnerability is wide-reaching and affects both open-source projects and enterprise software. VMWare announced shortly after the release of… read more →
Another Log4j on the fire: Unifi
By now, you’re probably well aware of a recently disclosed vulnerability for the Java logging library, Log4j. The vulnerability is wide-reaching and affects Ubiquiti's Unifi Network Application. In this article, we’re… read more →
How to exploit Log4j vulnerabilities in VMWare vCenter
A vulnerability was recently disclosed for the Java logging library, Log4j. The vulnerability is wide-reaching and affects both open source projects and enterprise software, meaning we need to understand how to ID and… read more →
Traditional vs. Continuous Pentesting: A Comparison Checklist
We get a lot of questions about what makes continuous penetration testing more valuable than traditional timebox testing. Seriously, A LOT of questions – all of which are warranted. Take a look below, and we’re pretty… read more →
Never Stop Frontin’: Redirector and Proxy Setup Made Easy
Protecting your infrastructure from prying eyes is an important part of landing a phish and maintaining access to a client’s network. The process of setting up redirectors and reverse proxies has traditionally been… read more →
Continuous Human & Automated Security
The Expert-Driven Offensive
Security Platform
Continuously monitor your attack surface with advanced change detection. Upon change, testers and systems perform security testing. You are alerted and assisted in remediation efforts all contained in a single security application, the Sprocket Platform.
Expert-Driven Offensive Security Platform
- Attack Surface Management
- Continuous Penetration Testing
- Adversary Simulations