PROFESSIONALLY EVIL BLOG

We Break Things For a Living.

We Also Write About Things.

Our expert-led content ranges from deep-dives into penetration testing to explorations of hardware hacking. In this digital playground, we unravel the complex world of information security with a touch of fun. Whether you’re curious about Secure Ideas or passionate about cybersecurity, this blog is your quick, enlightening, and entertaining guide into the captivating world of information security. 

Professional Insights Blog

Latest Post

Compiling is Not Hiding: Hardcoded Secrets in Mobile Apps

Most of the secrets I’ve found in mobile apps were not stolen. They were shipped. What do I mean by that? I mean nobody needs to break into the vault when the combination is printed on every door. Compiling is not hiding: it changes the format of the code, not...

All Entries

Top 5 Security Considerations for a New Web App: 2. Authentication & Authorization

Top 5 Security Considerations for a New Web App: 2. Authentication & Authorization

As we venture into the realm of web application security, it becomes evident that the foundation of a secure web application lies in its coding...
Top 5 Security Considerations for a New Web App: 1. Secure Coding

Top 5 Security Considerations for a New Web App: 1. Secure Coding

Explore web application security: Secure Coding is key to building robust, safe apps. Learn the foundational practices....
Top 5 Security Considerations for a New Web App

Top 5 Security Considerations for a New Web App

Given the criticality of web application security, it's imperative to delve deeper into what exactly it entails....
Quick Bites

Quick Bites Episode 11 – Ranking Application Risks

Learn how to rank the risk associated with vulnerabilities in your application, then prioritize the risk based on criticality....
SQL Injection Vulnerability: Identification and Prevention Methods

SQL Injection Vulnerability: Identification and Prevention Methods

The FBI and CISA released a Secure by Design alert calling for the elimination of SQL injection vulnerabilities. This post covers SQLi causes and detection...
Being Safe and Secure with Cross Origin Messaging

Being Safe and Secure with Cross-Origin Messaging

Explore onMessage and postMessage in browsers: Learn cross-origin JavaScript interactions, security issues, and flaw prevention....
Prompt Injection

Prompt Injection

Discover AI prompt injection with Cory Sabol: understand this AI threat, its impact, real examples, and defenses....
Quick Bites

Quick Bites Episode 10 – Half Shells and Full Shells

Today’s Quick Bites shows you hackers out there how to upgrade your simple netcat shell into a full PTY shell…with pictures!...
Intro to NMAP

Intro to NMAP

Explore our essential tool for network security and vulnerability detection, perfect for both beginners and experts...
What does PCI require for Developer Training?

What does PCI require for Developer Training?

Understand what the PCI DSS requires for annual developer training....
Uncharted Waters: Network Depths with runZero & OPNsense

Uncharted Waters: Network Depths with runZero & OPNsense

Looking deep into your network with runZero and OPNsense. Learn how to use runZero, when using OPNSense, to discover all devices on your network....

Get the Debrief in Your Inbox

New findings, series updates, and usually some bad puns. Delivered when we actually have something worth saying.

No spam. Unsubscribe whenever. We’re evil, not rude.

This website uses cookies

We use cookies to personalize content, provide social media features, and analyze our traffic. We also share information about your use of our site with our analytics partners. You can change your preferences at any time. For more information, please see our Privacy Policy