PROFESSIONALLY EVIL BLOG

We Break Things For a Living.

We Also Write About Things.

Our expert-led content ranges from deep-dives into penetration testing to explorations of hardware hacking. In this digital playground, we unravel the complex world of information security with a touch of fun. Whether you’re curious about Secure Ideas or passionate about cybersecurity, this blog is your quick, enlightening, and entertaining guide into the captivating world of information security. 

Professional Insights Blog

Latest Post

Password Vampires: Don’t Get Bitten Twice

With Halloween right around the corner, let’s talk about your dark secret from the distant past that could really come back to haunt you: that password you’ve been using since 2015. Don’t lie… You know the one.

...
Read More ›

All Entries

default

We Can’t Rely on the Browser for Protection

A large part of doing security consulting is providing proper mitigations and recommendations to our clients. Sure, the testing is the exciting part......
Read ›
default

Industry Issues: New Vulnerabilities and Marketing Problems

As a consultant, I spend a lot of my time working with organizations and staff to help them improve their security....
Read ›
Comparing Authorization Levels with Burp's Compare Site Map feature

Comparing Authorization Levels with Burp’s Compare Site Map feature

Burp Suite from Portswigger.net is a fantastic web app testing tool that we use regularly at Secure Ideas....
Read ›
default

Burp Extension for F5 Cookie Detection

James Jardine wrote an excellent blog post called “Decoding F5 Cookie” where he described in detail how F5 load balancers use a persistence cookie...
Read ›
default

Defending Against Pass-the-Hash (PtH) Attacks

Pass-the-Hash (PtH) attacks have become probably the most common form of credential attacks used in the hacking community....
Read ›
default

Introduction to Burp Suite Webcast

The below video is an introduction to Burp Suite. This is the first of our videos that will teach people how to use Burp Suite...
Read ›
default

Kismet Log Viewer v2 Tool Released

Secure Ideas actively supports open source and giving back to the community. In that light, we’re announcing the release of an updated tool......
Read ›
Professionally Evil Toolkit BozoCrack

Professionally Evil Toolkit – BozoCrack

This week I’ve been teaching a class on web app security for developers and I remembered a fun little script that I thought I’d share...
Read ›
default

Professionally Evil Toolkit – Reconnoiter

In this series of the Professionally Evil Toolkit we will be talking about Reconnoiter. Reconnoiter was created by Secure Ideas very own Jason Wood....
Read ›
default

Why Do Phishing As Part of Security Testing

I was recently watching a web cast on incident response and found myself thinking about the cause of the example incident....
Read ›
default

Professionally Evil Toolkit – Sqlmap

In this series of the Professionally Evil Toolkit we will be talking about sqlmap, an open source penetration testing tool that is written in python....
Read ›
Getting Started with BeEF: The Browser Exploitation Framework

Getting Started with BeEF: The Browser Exploitation Framework

This post is the first in a series on Getting Started with information security tools....
Read ›

Get the Debrief in Your Inbox

New findings, series updates, and usually some bad puns. Delivered when we actually have something worth saying.

No spam. Unsubscribe whenever. We’re evil, not rude.

This website uses cookies

We use cookies to personalize content, provide social media features, and analyze our traffic. We also share information about your use of our site with our analytics partners. You can change your preferences at any time. For more information, please see our Privacy Policy.