Resources
Latest Web App Assessments Resources
7 Types of Web Application Testing and Building a Testing Strategy
Web application testing involves evaluating an application to ensure its functionality, security, and usability meet the required standards before deployment.
Read more
WebQL: Using CodeQL To Conduct JavaScript Security Analysis Against Modern Web Applications
Introducing WebQL, an automated JavaScript analysis tool that leverages CodeQL to identify and exploit vulnerabilities in modern web applications like SPAs and PWAs. By automating the extraction, beautification, and… read more →
How to introduce security testing to your web app deployments during QA
Fixing these vulnerabilities in production is more expensive than finding and fixing them earlier in the SDLC. One way that organizations can drive down the cost of vulnerability management is by integrating security… read more →
Surfacing the Invisible: A Guide to Web Application Attack Surface Management
The top five web application-specific attack surface management opportunities Sprocket Security sees regularly. read more →
Discovering wp-admin.php URLs in Wordpress With GravityForms
By targeting a specific endpoint and passing in a random string, GravityForms will prompt users to authenticate first. This results in the unauthenticated user being redirected to the obscured administrative login page… read more →
cURL For The Pentester: Above & Beyond
Did you know you can interact with LDAP using cURL? How about NTLM, proxy tunneling, or domain sockets? A deep dive into some less common and advanced features of cURL, including sending POST requests with a payload… read more →
A Showcase of the Top OWASP Risks
Exploiting several Top 10 risks using the Damn Vulnerable Web Application (DVWA), as it’s expressly configured to highlight sub-optimal cybersecurity practices relevant to modern web applications. read more →
Continuous Human & Automated Security
The Expert-Driven Offensive
Security Platform
Continuously monitor your attack surface with advanced change detection. Upon change, testers and systems perform security testing. You are alerted and assisted in remediation efforts all contained in a single security application, the Sprocket Platform.
Expert-Driven Offensive Security Platform
- Attack Surface Management
- Continuous Penetration Testing
- Adversary Simulations