PROFESSIONALLY EVIL BLOG

We Break Things For a Living.

We Also Write About Things.

Our expert-led content ranges from deep-dives into penetration testing to explorations of hardware hacking. In this digital playground, we unravel the complex world of information security with a touch of fun. Whether you’re curious about Secure Ideas or passionate about cybersecurity, this blog is your quick, enlightening, and entertaining guide into the captivating world of information security. 

Professional Insights Blog

Latest Post

Password Vampires: Don’t Get Bitten Twice

With Halloween right around the corner, let’s talk about your dark secret from the distant past that could really come back to haunt you: that password you’ve been using since 2015. Don’t lie… You know the one.

...
Read More ›

All Entries

3 Reasons to Pentest with Brave

3 Reasons to Pentest with Brave

Penetration testing is a race against the clock. Often, we only have a few days to examine all the functionality of a web application or...
Read ›
credentials

What are the credentials of your team?

This Knowledge Center article discusses our credentials as well as our experience....
Read ›
What factors impact the cost of Reporting

What is in a Penetration Test Report?

This article explains the types of deliverables are produced during a penetration test....
Read ›
Attestation Letter

What is an Attestation Letter?

An article explaining what an attestation letter or an executive summary report means....
Read ›
How are security findings risk ranked

How are security findings risk-ranked?

This article discusses how Secure Ideas ranks findings within their reports....
Read ›
How Soon Can We Schedule a Test

Not-So-Random: Using LD_PRELOAD to Hijack the rand() Function

In today’s post we are going to hijack the rand() function in a simple random number guessing game to control the generation of random numbers...
Read ›
Boolean Math4

Boolean Math (NOT Logic) – CISSP Domain 3

We’ve got another Boolean math session lined up for you today....
Read ›
The Death and Rebirth of Musashi

The Death and Rebirth of Musashi.js OR How I turned personal failure into better teaching tools.

As I stood in front of a class of developers trying to explain cross-origin resource sharing, I knew I wasn’t conveying it well enough....
Read ›
Boolean Math3

Boolean Math (XOR Logic) – CISSP Domain 3

We’ve got another Boolean math session to look over today. Our focus this time will be on the XOR logic....
Read ›
LD PRELOAD – Introduction

LD_PRELOAD – Introduction

Today I wanted to start what I plan to be a small series of blog posts about LD_PRELOAD. LD_PRELOAD is related to Linux based systems....
Read ›
Boolean Math2

Boolean Math (OR Logic) – CISSP Domain 3

Today we are going to take another look at some Boolean mathematics....
Read ›
Proxies, Pivots, and Tunnels

Proxies, Pivots, and Tunnels – Oh My!

Talking about a proxy or a pivot or a tunnel, we could be talking about very different things. However, to me, these terms could mean...
Read ›

Get the Debrief in Your Inbox

New findings, series updates, and usually some bad puns. Delivered when we actually have something worth saying.

No spam. Unsubscribe whenever. We’re evil, not rude.