PROFESSIONALLY EVIL BLOG

We Break Things For a Living.

We Also Write About Things.

Our expert-led content ranges from deep-dives into penetration testing to explorations of hardware hacking. In this digital playground, we unravel the complex world of information security with a touch of fun. Whether you’re curious about Secure Ideas or passionate about cybersecurity, this blog is your quick, enlightening, and entertaining guide into the captivating world of information security. 

Professional Insights Blog

Latest Post

Compiling is Not Hiding: Hardcoded Secrets in Mobile Apps

Most of the secrets I’ve found in mobile apps were not stolen. They were shipped. What do I mean by that? I mean nobody needs to break into the vault when the combination is printed on every door. Compiling is not hiding: it changes the format of the code, not...

Read More ›

All Entries

Computers are People Too

Computers are People Too

There are those rare times during pen tests, when you are on a client’s network and you don’t have any valid domain credentials but you...
Read ›
Taming the Jungle: Hardening your AWS infrastructure

Taming the Jungle: Hardening your AWS infrastructure

After nine tutorials, sixteen posts on stack overflow, and several hours or workweeks of effort you’ve finally done it....
Read ›
10 Tips for Engaging a Security Services Vendor

10 Tips for Engaging a Security Services Vendor

With huge growth comes an avalanche of security companies promising to fix all of your cyber worries....
Read ›
File Encryption Using VHD and BitLocker

File Encryption Using VHD and BitLocker

There’s always some sort of data that we want to keep safe such as, personal information, customer data, super-secret-squirrel project files…...
Read ›
Automating Red Team Homelabs: Part 2 – Build, Pentest, Destroy, and Repeat

Automating Red Team Homelabs: Part 2 – Build, Pentest, Destroy, and Repeat

The process of building your own fully updated, customized kali vagrant box automatically, and then talk about how to use that box effectively....
Read ›
Post Quantum Cryptography Series

Post-Quantum Cryptography Series

Curious what quantum computers with sufficient qubits and quantum error correction will mean to the confidentiality and integrity of global communication?...
Read ›
default

That looks ODD Securing your workspace

When you look at “security” and the big picture, it always seems to come down to the decisions made by the CSO and CIO....
Read ›
Better API Penetration Testing with Postman – Part 3

Better API Penetration Testing with Postman – Part 3

We will dig into some slightly more advanced functionality in Postman that you almost certainly want to leverage....
Read ›
default

We take security seriously and other trite statements

Earlier this week, Secure Ideas sent an initial notification regarding an incident targeting us that took place at a vendor....
Read ›
Better API Penetration Testing with Postman – Part 2

Better API Penetration Testing with Postman – Part 2

In Part 1 of this series, I walked through an introduction to Postman, a popular tool for API developers that makes it easier to test...
Read ›
Security Misconfigurations

Security Misconfigurations

The configuration of web and application servers is a very important aspect of web applications. Often times, failure to manage proper configurations......
Read ›
Better API Penetration Testing with Postman Part 1

Better API Penetration Testing with Postman – Part 1

This is the first of a multi-part series on testing with Postman....
Read ›

Get the Debrief in Your Inbox

New findings, series updates, and usually some bad puns. Delivered when we actually have something worth saying.

No spam. Unsubscribe whenever. We’re evil, not rude.

This website uses cookies

We use cookies to personalize content, provide social media features, and analyze our traffic. We also share information about your use of our site with our analytics partners. You can change your preferences at any time. For more information, please see our Privacy Policy