PROFESSIONALLY EVIL BLOG

We Break Things For a Living.

We Also Write About Things.

Our expert-led content ranges from deep-dives into penetration testing to explorations of hardware hacking. In this digital playground, we unravel the complex world of information security with a touch of fun. Whether you’re curious about Secure Ideas or passionate about cybersecurity, this blog is your quick, enlightening, and entertaining guide into the captivating world of information security. 

Professional Insights Blog

Latest Post

Password Vampires: Don’t Get Bitten Twice

With Halloween right around the corner, let’s talk about your dark secret from the distant past that could really come back to haunt you: that password you’ve been using since 2015. Don’t lie… You know the one.

...
Read More ›

All Entries

How to Test Your Security Controls for SmallMedium Businesses

How to Test Your Security Controls for Small/Medium Businesses

We often get contacted by small businesses requesting their first penetration test because of compliance reasons....
Read ›
Cave of Broken Mirrors: 3 Issues with AWS Cognito

Cave of Broken Mirrors: 3 Issues with AWS Cognito

Secure Ideas is currently working on a revamp and redesign of our website and client portal, to promote a better user experience for our clients....
Read ›
default

Cracking WPA Pre Shared Keys

WPA/WPA2, more specifically situations where pre-shared keys (PSK) are used to authenticate to an access point....
Read ›
Three C Words of Web App Security: Part 3 – Clickjacking

Three C-Words of Web App Security: Part 3 – Clickjacking

Prologue back in April, called A Brief Evolution of Web Apps, to set the scene for those less versed in web application history....
Read ›
Fuzz Testing

Fuzz Testing

A brand new piece of software, a program, a network, or an operating system, you will want to test it for any bugs, coding errors...
Read ›
#AffordableTraining requires change

#AffordableTraining requires change

In 2019 Secure Ideas is dedicated to offering affordable security training to everyone. This concept has been one of our core goals and passions....
Read ›
What is Physical Security?

What is Physical Security?

What’s Physical Security? Ok, I’m just going to say it, I’m a physical security guy in a IT security world. So why physical security for...
Read ›
Stored XSS: What Is It

Stored XSS: What Is It

In the cyber security world, there are a number of vulnerabilities to be aware of. Today we’re going to look at a specific one; Stored...
Read ›
A Container Hacker’s Guide to Living Off of the Land

A Container Hacker’s Guide to Living Off of the Land

Sometimes as a pentester you find yourself in tricky situations. Depending on the engagement, you might want to avoid making a lot of noise on...
Read ›
The Ignorant Human: Data’s Biggest Threat

The Ignorant Human: Data’s Biggest Threat

For all the money spent on expensive software solutions and expert consultation; an organization is still at a tremendous risk....
Read ›
Twelve Days of XSSmas

Twelve Days of XSSmas

This series of daily mini-posts, running from December 12, 2018 to December 24, 2018, is intended to provide cross-site scripting (XSS) related tips....
Read ›
Professionally Evil CISSP Certification: Breaking the Bootcamp Model

Professionally Evil CISSP Certification: Breaking the Bootcamp Model

ISC2 describes the CISSP as a way to prove “you have what it takes to effectively design, implement and manage a best-in-class cybersecurity program”....
Read ›

Get the Debrief in Your Inbox

New findings, series updates, and usually some bad puns. Delivered when we actually have something worth saying.

No spam. Unsubscribe whenever. We’re evil, not rude.

This website uses cookies

We use cookies to personalize content, provide social media features, and analyze our traffic. We also share information about your use of our site with our analytics partners. You can change your preferences at any time. For more information, please see our Privacy Policy.