Find the latest Webinar content from the Sprocket Testing Team.

Blog

Stay updated with the latest offensive security news, knowledge, and resources.

Latest Resources

Ahead of the Breach - Jack Leidecker, CISO at Gong
Sep 24, 2024 5 min read

Ahead of the Breach - Jack Leidecker, CISO at Gong

Ahead of the Breach Podcast sits down with Jack Leidecker, CISO at Gong, to discusses the importance of proactive cybersecurity measures and building effective security programs from scratch.
READ MORE
WebQL: Using CodeQL To Conduct JavaScript Security Analysis Against Modern Web Applications
Sep 23, 2024 11 min read

WebQL: Using CodeQL To Conduct JavaScript Security Analysis Against Modern Web Applications

Introducing WebQL, an automated JavaScript analysis tool that leverages CodeQL to identify and exploit vulnerabilities in modern web applications like SPAs and PWAs. By automating the extraction, beautification, and analysis of client-side code, WebQL enhances penetration testing by uncovering security issues obscured by modern development practices.
READ MORE
I’m sick of 1000-line Python scripts.
Sep 20, 2024 11 min read

I’m sick of 1000-line Python scripts.

This blog introduces snickerdoodle, a customized Cookiecutter template designed to help penetration testers quickly create and share complex CLI tools. By automating project setup with features like pre-configured CLI interfaces, Rich logging, and integrated dependency management using Poetry, Snickerdoodle allows security professionals to focus on coding rather than boilerplate setup.
READ MORE
Website Penetration Testing: Types, Methods, and Best Practices
Sep 19, 2024 18 min read

Website Penetration Testing: Types, Methods, and Best Practices

Website penetration testing is a simulated cyberattack designed to identify vulnerabilities in a web application. This process replicates the techniques used by real attackers to uncover security gaps. By proactively testing, website owners gain critical insights into potential weaknesses, allowing them to address issues before they’re exploited by malicious actors.
READ MORE
Ahead of the Breach - Daniel Creed, CISO at Allegiant Travel Company
Sep 16, 2024 4 min read

Ahead of the Breach - Daniel Creed, CISO at Allegiant Travel Company

Ahead of the Breach Podcast sits down with Daniel Creed to discuss navigating the risks of deepfakes in corporate security.
READ MORE
Penetration Testing in 2024: Why, What, and How
Sep 12, 2024 18 min read

Penetration Testing in 2024: Why, What, and How

Discover how penetration testing identifies security vulnerabilities to protect systems and data from real-world attacks. Learn the key phases and methods.
READ MORE