PROFESSIONALLY EVIL BLOG

We Break Things For a Living.

We Also Write About Things.

Our expert-led content ranges from deep-dives into penetration testing to explorations of hardware hacking. In this digital playground, we unravel the complex world of information security with a touch of fun. Whether you’re curious about Secure Ideas or passionate about cybersecurity, this blog is your quick, enlightening, and entertaining guide into the captivating world of information security. 

Professional Insights Blog

Latest Post

Password Vampires: Don’t Get Bitten Twice

With Halloween right around the corner, let’s talk about your dark secret from the distant past that could really come back to haunt you: that password you’ve been using since 2015. Don’t lie… You know the one.

...

All Entries

Don’t Get Tricked: How to Spot Phishing Before You Take the Bait

Don’t Get Tricked: How to Spot Phishing Before You Take the Bait

October means Fall, arguably the best season of the year, because it means cooler weather, scary movies, Halloween, and more than a few tricks and...

External Pentest

How to Prepare for Your External Pentest

Scheduling a penetration test means you are not waiting around for a breach to tell you where security gaps might exist within your environment. However,...

Maker Faire: Results, Reactions & What’s Next (AI Pit Droid pt. 4)

Maker Faire: Results, Reactions & What’s Next (AI Pit Droid pt. 4)

Three days at Orlando Maker Faire with an AI-powered Star Wars Pit Droid. What worked, what failed, and how the project evolves with Claude and...
Building a Dedicated Web App & API Pentesting Lab

Building a Dedicated Web App & API Pentesting Lab

Learn how to build a dedicated web app and API pentesting lab using Docker, explore various vulnerable applications, and enhance your penetration testing skills....
Rolling for Resilience Part 6 Loot Drops & Learning Points: Measuring What Matters

Rolling for Resilience Part 6 – Loot Drops & Learning Points: Measuring What Matters

Explore the importance of role-based paths in cybersecurity incident response training, enhancing engagement and realism in tabletop exercises....
Building the Body (AI Pit Droid pt. 3)

Building the Body (AI Pit Droid pt. 3)

From FDM printing and paint prep to USB peripherals and servo control, here's how the physical AI Pit Droid came together for Maker Faire Orlando....
Creating an Encrypted File Container with LUKS

Creating an Encrypted File Container with LUKS

LUKS (Linux Unified Key Setup) provides disk encryption that is considered to be the standard for Linux-based systems. This article will cover the basics of...
Paths to Power in Active Directory Part 6: ESC8 The Coerced Crown

Paths to Power in Active Directory Part 6: ESC8 – The Coerced Crown

Explore the risks of privilege escalation in Active Directory through certificate manipulation, highlighting the ESC6 attack path and its implications for security....
"It's a Dangerous Business, Going Out Your Door" Why the Cybersecurity Community Needs a Fellowship

“It’s a Dangerous Business, Going Out Your Door” – Why the Cybersecurity Community Needs a Fellowship

Explore how a fellowship model can transform the cybersecurity community, fostering mentorship and inclusivity for newcomers and veterans alike....
No Hash? No Problem! ASERepCatcher

No Hash? No Problem! – ASERepCatcher

Learn how to capture and crack Kerberos authentication traffic with ASRepCatcher, a powerful tool for internal penetration testing and credential interception....
The AI Brain: Teaching the Droid to See (AI Pit Droid pt. 2)

The AI Brain: Teaching the Droid to See (AI Pit Droid pt. 2)

How YOLOv8, MediaPipe, and an NVIDIA Jetson Orin Nano power real-time human detection and gesture recognition in a 3D-printed Star Wars Pit Droid....
What Is a SIAM and Why Is One Showing Up at Your Office?

What Is a SIAM and Why Is One Showing Up at Your Office?

Discover how the Secure Ideas Attack Machine (SIAM) simplifies internal penetration testing, ensuring security without the need for onsite consultants....

Get the Debrief in Your Inbox

New findings, series updates, and usually some bad puns. Delivered when we actually have something worth saying.

No spam. Unsubscribe whenever. We’re evil, not rude.

This website uses cookies

We use cookies to personalize content, provide social media features, and analyze our traffic. We also share information about your use of our site with our analytics partners. You can change your preferences at any time. For more information, please see our Privacy Policy.