PROFESSIONALLY EVIL BLOG

We Break Things For a Living.

We Also Write About Things.

Our expert-led content ranges from deep-dives into penetration testing to explorations of hardware hacking. In this digital playground, we unravel the complex world of information security with a touch of fun. Whether you’re curious about Secure Ideas or passionate about cybersecurity, this blog is your quick, enlightening, and entertaining guide into the captivating world of information security. 

Professional Insights Blog

Latest Post

Password Vampires: Don’t Get Bitten Twice

With Halloween right around the corner, let’s talk about your dark secret from the distant past that could really come back to haunt you: that password you’ve been using since 2015. Don’t lie… You know the one.

...
Read More ›

All Entries

default

Spear Phishing: “You guys are Shady!”

This post is part of our Professionally Evil series of posts that discuss some of the experiences we have had as Security Consultants....
Read ›
default

Happy New Years!

As we finish 2012 and look forward to 2013, Secure Ideas’ staff would like to wish everyone a happy new year....
Read ›
Don’t Trust the Replacement Delivery Guy

Don’t Trust the Replacement Delivery Guy

Here at Secure Ideas we have had a ton of fun experiences during our work....
Read ›
default

Installing RatProxy on Windows Webcast

A few months ago I did the original Installing RatProxy on Windows blog post that describes both how to install Cygwin (required for RatProxy) and...
Read ›
default

Grey Box Penetration Testing

A common question I get from potential clients is “what is grey box testing and why do we need it?”...
Read ›
default

SH5ARK: Taking a Byte out of HTML5

The new features in HTML5 have opened a whole new world of opportunities for developers and for attackers. Secure Ideas recognized this and with the...
Read ›
default

How To: Encrypting Mac Mail

As a security consultant, frequently traveling, it is critical to implement security controls to protect sensitive data on my computer....
Read ›
default

Ninja Developer Talk at Louisville Metro Infosec Conference

I recently attended, and spoke, at the Louisville Metro Infosec Conference (http://louisvilleinfosec.com/) in Kentucky....
Read ›
default

ViewState XSS: What’s the Deal?

As penetration testers, there are many different technologies that we have to be familiar with. The more we know and understand, the better......
Read ›
default

Testing ASP.Net WebForms: Request Method Validation

As a professional penetration tester, there are many features of an application that are similar across all languages....
Read ›
default

SamuraiWTF 2.0? What happened to 1.0?

SamuraiWTF project released the previously available version was 0.9.9 it seems odd that the current version is 2.0RC5....
Read ›
default

How to Setup SSH on MobiSec

MobiSec will be installed on a VM running on their testing machine, however, I recently came across the need to run MobiSec on an ESXi...
Read ›

Get the Debrief in Your Inbox

New findings, series updates, and usually some bad puns. Delivered when we actually have something worth saying.

No spam. Unsubscribe whenever. We’re evil, not rude.

This website uses cookies

We use cookies to personalize content, provide social media features, and analyze our traffic. We also share information about your use of our site with our analytics partners. You can change your preferences at any time. For more information, please see our Privacy Policy.