PROFESSIONALLY EVIL BLOG

We Break Things For a Living.

We Also Write About Things.

Our expert-led content ranges from deep-dives into penetration testing to explorations of hardware hacking. In this digital playground, we unravel the complex world of information security with a touch of fun. Whether you’re curious about Secure Ideas or passionate about cybersecurity, this blog is your quick, enlightening, and entertaining guide into the captivating world of information security. 

Professional Insights Blog

Latest Post

Compiling is Not Hiding: Hardcoded Secrets in Mobile Apps

Most of the secrets I’ve found in mobile apps were not stolen. They were shipped. What do I mean by that? I mean nobody needs to break into the vault when the combination is printed on every door. Compiling is not hiding: it changes the format of the code, not...

Read More ›

All Entries

What is the Scope of a Penetration Test

What is the Scope of a Penetration Test?

This article answers the question about what penetration testing scope is and how it is determined....
Read ›
3 Reasons to Pentest with Brave

3 Reasons to Pentest with Brave

Penetration testing is a race against the clock. Often, we only have a few days to examine all the functionality of a web application or...
Read ›
credentials

What are the credentials of your team?

This Knowledge Center article discusses our credentials as well as our experience....
Read ›
What factors impact the cost of Reporting

What is in a Penetration Test Report?

This article explains the types of deliverables are produced during a penetration test....
Read ›
Attestation Letter

What is an Attestation Letter?

An article explaining what an attestation letter or an executive summary report means....
Read ›
How are security findings risk ranked

How are security findings risk-ranked?

This article discusses how Secure Ideas ranks findings within their reports....
Read ›
How Soon Can We Schedule a Test

Not-So-Random: Using LD_PRELOAD to Hijack the rand() Function

In today’s post we are going to hijack the rand() function in a simple random number guessing game to control the generation of random numbers...
Read ›
Boolean Math4

Boolean Math (NOT Logic) – CISSP Domain 3

We’ve got another Boolean math session lined up for you today....
Read ›
The Death and Rebirth of Musashi

The Death and Rebirth of Musashi.js OR How I turned personal failure into better teaching tools.

As I stood in front of a class of developers trying to explain cross-origin resource sharing, I knew I wasn’t conveying it well enough....
Read ›
Boolean Math3

Boolean Math (XOR Logic) – CISSP Domain 3

We’ve got another Boolean math session to look over today. Our focus this time will be on the XOR logic....
Read ›
LD PRELOAD – Introduction

LD_PRELOAD – Introduction

Today I wanted to start what I plan to be a small series of blog posts about LD_PRELOAD. LD_PRELOAD is related to Linux based systems....
Read ›
Boolean Math2

Boolean Math (OR Logic) – CISSP Domain 3

Today we are going to take another look at some Boolean mathematics....
Read ›

Get the Debrief in Your Inbox

New findings, series updates, and usually some bad puns. Delivered when we actually have something worth saying.

No spam. Unsubscribe whenever. We’re evil, not rude.

This website uses cookies

We use cookies to personalize content, provide social media features, and analyze our traffic. We also share information about your use of our site with our analytics partners. You can change your preferences at any time. For more information, please see our Privacy Policy