Professionally Evil Insights

Welcome to the Professionally Evil Insights blog by Secure Ideas! In this digital playground, we unravel the complex world of information security with a touch of fun. Our expert-led content ranges from deep-dives into penetration testing to explorations of hardware hacking. Whether you're curious about Secure Ideas or passionate about cybersecurity, this blog is your quick, enlightening, and entertaining guide into the captivating world of information security.

Welcome aboard!

Twelve Days of ZAPmas - Day 4 - Fuzzing for Injection

web penetration testing | application security | web application security | how-to

I briefly introduced fuzzing earlier in the series, citing it as the second primitive upon which ...

Twelve Days of ZAPmas - Day 3 - CYA (Cover Your Auth)

application security | OWASP | web application security | how-to

Access control is one of the crucial elements to application security. The vast majority of ...

Twelve Days of ZAPmas - Day 2 - The Edge of Tomorrow

Day 2 - The Edge of Tomorrow - Replaying and Tampering with Requests Fuzzing and tampering are like ...

Twelve Days of ZAPmas - Day 1 - Setting Up ZAP

web penetration testing | application security | OWASP | web application security | how-to

This holiday season, I’m going to run down some of the ins and outs of working with OWASP Zed ...

Quick Bites Ep 6 - Good Hygiene is IMPORTANT, PEOPLE!

So, I just missed a week of work because of the flu (it wasn’t COVID, I got tested). The flu SUCKS. ...

How to iterate through advfirewall rules

There are several ways to pull firewall information from a Windows system. Today we will leverage ...

Introduction to Writing Nmap Scripting Engine (NSE) Scripts

NMAP | programming | NSE

One thing I notice a lot of people are missing in their skill set as security professionals is the ...

Quick Bites Ep 5 - The Call Is Coming From INSIDE THE HOUSE

hacking | Quick Bites | Insider Threat | Attacks | Halloween

Man, I’ll be honest - I’m super excited to be doing a Halloween-themed blog post this year. So, ...

Working With Data: IP and Port Filtering

During our day-to-day work, there’s a lot of data that we interact with. In order to make good use ...

Coming Soon - Twelve Days of ZAPmas

Training | web penetration testing | application security | web application security

In December of 2018, I published a twelve-day series of cross-site scripting tips, tricks, and ...

Nmap vs. Masscan

hacking | NMAP | port scanning | masscan | host discovery

If you are in IT, chances are you have at least heard of Nmap and Masscan. Both are free and ...

7 8 9 10 11

Professionally Evil Insights

Never miss a professionally evil update!