PROFESSIONALLY EVIL BLOG

We Break Things For a Living.

We Also Write About Things.

Our expert-led content ranges from deep-dives into penetration testing to explorations of hardware hacking. In this digital playground, we unravel the complex world of information security with a touch of fun. Whether you’re curious about Secure Ideas or passionate about cybersecurity, this blog is your quick, enlightening, and entertaining guide into the captivating world of information security. 

Professional Insights Blog

Latest Post

Password Vampires: Don’t Get Bitten Twice

With Halloween right around the corner, let’s talk about your dark secret from the distant past that could really come back to haunt you: that password you’ve been using since 2015. Don’t lie… You know the one.

...
Read More ›

All Entries

Penetration Testing with Insomnia

Getting Started API Penetration Testing with Insomnia

In our blog series on Better API Penetration Testing with Postman we discussed using Postman as the client for testing RESTful service APIs....
Read ›
[Update] Using Components with Known Vulnerabilities

[Update] Using Components with Known Vulnerabilities

You would like to imagine that the attacker crafted a new exploit, leveraging a zero-day vulnerability that no one has any protection against....
Read ›
Kubernetes Security A Useful Bash One Liner

Kubernetes Security – A Useful Bash One-Liner

Whether you’re an administrator, pentester, devop engineer, programmer, or some other IT person, chances are that you’ve heard of Kubernetes (k8s)....
Read ›
How I Became a Security Consultant: AbsoluteAppsec Interview

How I Became a Security Consultant: AbsoluteAppsec Interview

Every so often, podcasts and such will invite me to speak on a variety of topics. And this week, I was very excited to join...
Read ›
Once upon a time there was a WebSocket

Once upon a time there was a WebSocket

This is the story from one of our recent penetration testing engagements....
Read ›
Building Blocks: Professionally Evil Fundamentals Series

Building Blocks: Professionally Evil Fundamentals Series

We at Secure Ideas love security education. What we enjoy even more is affordable security education....
Read ›
It's Okay, We're All On the SameSite

It’s Okay, We’re All On the SameSite

With Google’s recent announcement that all cookies without a SameSite flag will be treated as having SameSite=Lax set by default in Chrome version 80......
Read ›
In Case of Fire: Break Windows

In Case of Fire: Break Windows

When a client calls us to pentest a web application that is only available in Internet Explorer. I cringe. I don’t know if it’s flashbacks...
Read ›
Why doesn’t Secure Ideas offer Remediation

Why doesn’t Secure Ideas offer Remediation?

Secure Ideas believes that offering remediation violates our ethical standards and this article explains why and what you can do with our results....
Read ›
What are the Tools and Rules of Engagement at Secure Ideas for Web Application Penetration Tests

What tools are used when penetration testing a Web Application?

Penetration Testing tools for Web Applications. As OWASP explains, our testing are tool-assisted manual tests....
Read ›
How To Prepare for a Penetration Test

How To Prepare for a Penetration Test

Preparing for a penetration test helps improve the results. This article discusses how to prepare for a test from Secure Ideas....
Read ›
Brass Tacks

Brass Tacks: Experts Endorse Frequent Vuln Assessments

This article explains why it is so important to have regular vulnerability assessments and how Secure Ideas' Scout services can help....
Read ›

Get the Debrief in Your Inbox

New findings, series updates, and usually some bad puns. Delivered when we actually have something worth saying.

No spam. Unsubscribe whenever. We’re evil, not rude.