PROFESSIONALLY EVIL BLOG

We Break Things For a Living.

We Also Write About Things.

Our expert-led content ranges from deep-dives into penetration testing to explorations of hardware hacking. In this digital playground, we unravel the complex world of information security with a touch of fun. Whether you’re curious about Secure Ideas or passionate about cybersecurity, this blog is your quick, enlightening, and entertaining guide into the captivating world of information security. 

Professional Insights Blog

Latest Post

Password Vampires: Don’t Get Bitten Twice

With Halloween right around the corner, let’s talk about your dark secret from the distant past that could really come back to haunt you: that password you’ve been using since 2015. Don’t lie… You know the one.

...
Read More ›

All Entries

Three C Words of Web App Security: Part 1 CORS

Three C-Words of Web App Security: Part 1 – CORS

For those less versed in web applications and how they’ve evolved, I wrote a sort of prologue to this post back in April 2018....
Read ›
Going the distance with Burp

Going the distance with Burp

Welcome to the 5th blog on Burp Suite, and Happy 4th of July!...
Read ›
Ethics of Ethical Hacking

Ethics of Ethical Hacking

Ethical hacking uses the principles and techniques of hackers to help businesses protect their infrastructure and information......
Read ›
Escaping the Whale: Things you probably shouldn't do with Docker (Part 1)

Escaping the Whale: Things you probably shouldn’t do with Docker (Part 1)

One simple way to possibly open your system up to a plethora security issues, with a Docker container. You can even try this at home....
Read ›
Information Security: A Strategy for Small Business

Information Security: A Strategy for Small Business

The Internet’s importance to businesses of all sizes and across all industries is indisputable....
Read ›
Social Engineering – Why hack it, when people are just giving away their information!

Social Engineering – Why hack it, when people are just giving away their information!

More and more criminals have turned to cyber crime as a means to steal information and intrude on other people’s privacy....
Read ›
default

A Brief Evolution of Web Apps

To understand modern mechanisms, it’s helpful to look at what led to their creation....
Read ›
What factors impact the cost of Reporting

The Report

Being a pen tester is a cool job, we get to break into companies (with permission), steal stuff, and then tell them how we did...
Read ›
Ever Run a Relay? Why SMB Relays Should Be On Your Mind

Ever Run a Relay? Why SMB Relays Should Be On Your Mind

Time is never on your side when you’re onsite with a client and trying to get the first good foothold, with admin privileges, can seem...
Read ›
Burp Suite continuing the Saga

Burp Suite continuing the Saga

Welcome to the fourth blog introducing and exploring the features of Burp Suite. Please visit Secure Ideas’ previous blogs on using Burp Suite...
Read ›
These Aren't the Password Guidelines You're Looking For

These Aren’t the Password Guidelines You’re Looking For

With a flick of the wrist old Ben Kenobi deftly bypasses the identity & access management system of the poor Stormtroopers just doing their job....
Read ›
SamuraiWTF

The Future of SamuraiWTF

Samurai Web Testing Framework, if you’re not familiar with it, it’s a linux environment that is primarily now used for teaching web application pentesting....
Read ›

Get the Debrief in Your Inbox

New findings, series updates, and usually some bad puns. Delivered when we actually have something worth saying.

No spam. Unsubscribe whenever. We’re evil, not rude.

This website uses cookies

We use cookies to personalize content, provide social media features, and analyze our traffic. We also share information about your use of our site with our analytics partners. You can change your preferences at any time. For more information, please see our Privacy Policy.