PROFESSIONALLY EVIL BLOG

We Break Things For a Living.

We Also Write About Things.

Our expert-led content ranges from deep-dives into penetration testing to explorations of hardware hacking. In this digital playground, we unravel the complex world of information security with a touch of fun. Whether you’re curious about Secure Ideas or passionate about cybersecurity, this blog is your quick, enlightening, and entertaining guide into the captivating world of information security. 

Professional Insights Blog

Latest Post

Password Vampires: Don’t Get Bitten Twice

With Halloween right around the corner, let’s talk about your dark secret from the distant past that could really come back to haunt you: that password you’ve been using since 2015. Don’t lie… You know the one.

...

All Entries

IP whitelisting

What is IP whitelisting?

This article explains what is IP whitelisting and why it's useful for a penetration test...
Three Excellent API Security Practices Most People Neglect

Three Excellent API Security Practices Most People Neglect

Widely-used single-purpose products like Slack to cloud-based solutions like AWS and Microsoft Azure, APIs are used to drive business processes....
How to Prepare for an API Pentest

How to Prepare for an API Pentest?

This article explains what is needed for an API Penetration Test...
How Often Should You Perform Vulnerability Scans?

How Often Should You Perform Vulnerability Scans?

Learn the importance of regular vulnerability scans and how often major frameworks recommend scanning to maintain a robust security posture in your organization....
Do you offer regular vulnerability assessments

Do you offer regular vulnerability assessments?

This page discusses an answer to a question concerning vulnerability assessments...
Where do I start with security testing

Where do I start with security testing?

This knowledge center article is designed to help people get started in assessing their organization's security posture....
how to Run Code at Load Time

LD_PRELOAD: How to Run Code at Load Time

Today I want to continue the series on using LD_PRELOAD. What if we want to run code before the program even runs from within the...
default

Announcing Burp Co2!

Over the past couple of months I have been using my Java skills to build a collection of Burp extensions that have been dubbed “Co2”....
What is Internal Penetration Testing

What is Internal Penetration Testing?

Discover what internal penetration testing is, how it simulates insider threats, and why it's crucial for finding vulnerabilities & strengthening security....
Converting NMAP XML Files to HTML with xsltproc

Converting NMAP XML Files to HTML with xsltproc

NMAP is a wonderful network scanner and its ability to log scan data to files, specifically XML, helps quite a bit....
Can you test our product that we sell

Can you test our product that we sell?

This page provides details about pentesting products....
What is the Scope of a Penetration Test

What is the Scope of a Penetration Test?

This article answers the question about what penetration testing scope is and how it is determined....

Get the Debrief in Your Inbox

New findings, series updates, and usually some bad puns. Delivered when we actually have something worth saying.

No spam. Unsubscribe whenever. We’re evil, not rude.