Author
Justin Wise
Explore the author's collection.
Resources by Justin Wise
Ahead of the Breach - Mario DiNatale, CISO at Odyssey Group
Ahead of the Breach Podcast sits down with Mario DiNatale to discuss cyber risk strategy & security team methodology. read more →
Ahead of the Breach - Mike Takahashi, Security Engineering Expert & Leader
Ahead of the Breach Podcast sits down with Mike Takahashi, Security Engineering Expert & Leader, as he shares his insights into the art of Google Dorking, explaining how targeted search queries can reveal hidden… read more →
Introducing the Ahead of the Breach Podcast!
Sprocket's Ahead of the Breach Podcast is now LIVE! Join Casey Cammilleri as he interviews guests to explore innovative strategies, identify emerging trends, and share actionable takeaways to help security leaders stay… read more →
Forbidden! Are 403 bypasses worth looking for?
403 status code bypasses might seem niche and impractical at first glance, but they can be surprisingly valuable for uncovering vulnerabilities at scale. This blog delves into the nuances of 403 bypass techniques,… read more →
Recent InfoSec Talks, Defcon 32 - SSHamble: Unexpected Exposures in the Secure Shell
Will Vandevanter discusses a talk he saw at Defcon 2024 that was jam-packed with knowledge, hunting an international criminal, 0 days, and a new open-source tool. Will also talks about some takeaways he got from the… read more →
Adopting a Continuous Security Mindset
Despite the increase of "continuous" security solutions, the fundamental issues in cybersecurity remain unresolved. The real challenge lies not in the availability of information but in how organizations use it to… read more →
One Proxy to Rule Them All
Bypass WAFs with gigaproxy: an HTTP proxy that rotates IPs using mitmproxy, AWS API Gateway, and Lambda. Read the blog to learn more. read more →
Exploring Modern Password Spraying: Introduction to Entra Smart Lockout
Delve into the modern techniques and security controls surrounding password spraying. This series will explore the current techniques, tactics, and procedures (TTPs) for password spraying. read more →
Pwning SPA’s With Semgrep
Semgrep, or Semantic Grep (For Code) should be a part of your pentesting toolkit. If you think otherwise, read on to see why. read more →
PCI DSS 4.0 and a Continuous Offensive Security Strategy
In the ever-evolving landscape of cybersecurity, organizations are constantly challenged to protect their sensitive data. The Payment Card Industry Data Security Standard (PCI DSS) version 4.0 is the latest iteration of… read more →
From Twitter to Exploit: The Sprocket Security Lifecycle of Exploitation
Our approach to mass exploitation of the latest and greatest vulnerability. On the chopping block, this time around: CVE-2024-3400. read more →
Zip Slip Exploitation in File Uploads with Hackvertor
Custom Tags are one of Hackvertor's most powerful features. They allow you to run Python, Java, or JavaScript with a one-liner inside any Burp request. In this blog post, we will discuss performing Zip Slip testing with… read more →
Continuous Human & Automated Security
The Expert-Driven Offensive
Security Platform
Continuously monitor your attack surface with advanced change detection. Upon change, testers and systems perform security testing. You are alerted and assisted in remediation efforts all contained in a single security application, the Sprocket Platform.
Expert-Driven Offensive Security Platform
- Attack Surface Management
- Continuous Penetration Testing
- Adversary Simulations