PROFESSIONALLY EVIL BLOG

We Break Things For a Living.

We Also Write About Things.

Our expert-led content ranges from deep-dives into penetration testing to explorations of hardware hacking. In this digital playground, we unravel the complex world of information security with a touch of fun. Whether you’re curious about Secure Ideas or passionate about cybersecurity, this blog is your quick, enlightening, and entertaining guide into the captivating world of information security. 

Professional Insights Blog

Latest Post

Compiling is Not Hiding: Hardcoded Secrets in Mobile Apps

Most of the secrets I’ve found in mobile apps were not stolen. They were shipped. What do I mean by that? I mean nobody needs to break into the vault when the combination is printed on every door. Compiling is not hiding: it changes the format of the code, not...

Read More ›

All Entries

Tips for Penetration Testing a PCI environment

Tips for Penetration Testing a PCI environment

A list of things to help me keep my PCI testing on track, not to mention just as a guideline to start discussions among others...
Read ›
Three C Words of Web App Security: Part 1 CORS

Three C-Words of Web App Security: Part 1 – CORS

For those less versed in web applications and how they’ve evolved, I wrote a sort of prologue to this post back in April 2018....
Read ›
Going the distance with Burp

Going the distance with Burp

Welcome to the 5th blog on Burp Suite, and Happy 4th of July!...
Read ›
Ethics of Ethical Hacking

Ethics of Ethical Hacking

Ethical hacking uses the principles and techniques of hackers to help businesses protect their infrastructure and information......
Read ›
Escaping the Whale: Things you probably shouldn't do with Docker (Part 1)

Escaping the Whale: Things you probably shouldn’t do with Docker (Part 1)

One simple way to possibly open your system up to a plethora security issues, with a Docker container. You can even try this at home....
Read ›
Information Security: A Strategy for Small Business

Information Security: A Strategy for Small Business

The Internet’s importance to businesses of all sizes and across all industries is indisputable....
Read ›
Social Engineering – Why hack it, when people are just giving away their information!

Social Engineering – Why hack it, when people are just giving away their information!

More and more criminals have turned to cyber crime as a means to steal information and intrude on other people’s privacy....
Read ›
default

A Brief Evolution of Web Apps

To understand modern mechanisms, it’s helpful to look at what led to their creation....
Read ›
What factors impact the cost of Reporting

The Report

Being a pen tester is a cool job, we get to break into companies (with permission), steal stuff, and then tell them how we did...
Read ›
Ever Run a Relay? Why SMB Relays Should Be On Your Mind

Ever Run a Relay? Why SMB Relays Should Be On Your Mind

Time is never on your side when you’re onsite with a client and trying to get the first good foothold, with admin privileges, can seem...
Read ›
Burp Suite continuing the Saga

Burp Suite continuing the Saga

Welcome to the fourth blog introducing and exploring the features of Burp Suite. Please visit Secure Ideas’ previous blogs on using Burp Suite...
Read ›
These Aren't the Password Guidelines You're Looking For

These Aren’t the Password Guidelines You’re Looking For

With a flick of the wrist old Ben Kenobi deftly bypasses the identity & access management system of the poor Stormtroopers just doing their job....
Read ›

Get the Debrief in Your Inbox

New findings, series updates, and usually some bad puns. Delivered when we actually have something worth saying.

No spam. Unsubscribe whenever. We’re evil, not rude.

This website uses cookies

We use cookies to personalize content, provide social media features, and analyze our traffic. We also share information about your use of our site with our analytics partners. You can change your preferences at any time. For more information, please see our Privacy Policy