PROFESSIONALLY EVIL BLOG

We Break Things For a Living.

We Also Write About Things.

Our expert-led content ranges from deep-dives into penetration testing to explorations of hardware hacking. In this digital playground, we unravel the complex world of information security with a touch of fun. Whether you’re curious about Secure Ideas or passionate about cybersecurity, this blog is your quick, enlightening, and entertaining guide into the captivating world of information security. 

Professional Insights Blog

Latest Post

Compiling is Not Hiding: Hardcoded Secrets in Mobile Apps

Most of the secrets I’ve found in mobile apps were not stolen. They were shipped. What do I mean by that? I mean nobody needs to break into the vault when the combination is printed on every door. Compiling is not hiding: it changes the format of the code, not...

Read More ›

All Entries

A Hacker’s Tour of the X86

A Hacker’s Tour of the X86 CPU Architecture

Overview The Intel x86 CPU architecture is one of the most prolific CPU architectures for desktops, laptops, and servers....
Read ›
IP whitelisting

What is IP whitelisting?

This article explains what is IP whitelisting and why it's useful for a penetration test...
Read ›
Three Excellent API Security Practices Most People Neglect

Three Excellent API Security Practices Most People Neglect

Widely-used single-purpose products like Slack to cloud-based solutions like AWS and Microsoft Azure, APIs are used to drive business processes....
Read ›
How to Prepare for an API Pentest

How to Prepare for an API Pentest?

This article explains what is needed for an API Penetration Test...
Read ›
How Often Should You Perform Vulnerability Scans?

How Often Should You Perform Vulnerability Scans?

Learn the importance of regular vulnerability scans and how often major frameworks recommend scanning to maintain a robust security posture in your organization....
Read ›
Do you offer regular vulnerability assessments

Do you offer regular vulnerability assessments?

This page discusses an answer to a question concerning vulnerability assessments...
Read ›
Where do I start with security testing

Where do I start with security testing?

This knowledge center article is designed to help people get started in assessing their organization's security posture....
Read ›
how to Run Code at Load Time

LD_PRELOAD: How to Run Code at Load Time

Today I want to continue the series on using LD_PRELOAD. What if we want to run code before the program even runs from within the...
Read ›
default

Announcing Burp Co2!

Over the past couple of months I have been using my Java skills to build a collection of Burp extensions that have been dubbed “Co2”....
Read ›
What is Internal Penetration Testing

What is Internal Penetration Testing?

Discover what internal penetration testing is, how it simulates insider threats, and why it's crucial for finding vulnerabilities & strengthening security....
Read ›
Converting NMAP XML Files to HTML with xsltproc

Converting NMAP XML Files to HTML with xsltproc

NMAP is a wonderful network scanner and its ability to log scan data to files, specifically XML, helps quite a bit....
Read ›
Can you test our product that we sell

Can you test our product that we sell?

This page provides details about pentesting products....
Read ›

Get the Debrief in Your Inbox

New findings, series updates, and usually some bad puns. Delivered when we actually have something worth saying.

No spam. Unsubscribe whenever. We’re evil, not rude.

This website uses cookies

We use cookies to personalize content, provide social media features, and analyze our traffic. We also share information about your use of our site with our analytics partners. You can change your preferences at any time. For more information, please see our Privacy Policy