We take security seriously and other trite statements

Earlier this week, Secure Ideas sent an initial notification regarding an incident targeting us that took place at a vendor.
Professionally Evil CISSP Certification: Breaking the Bootcamp Model

ISC2 describes the CISSP as a way to prove “you have what it takes to effectively design, implement and manage a best-in-class cybersecurity program”.
Ethics of Ethical Hacking

Ethical hacking uses the principles and techniques of hackers to help businesses protect their infrastructure and information…
We’re Just Like the NSA, and Nothing Like Them

During penetration tests, and especially scoping calls, we often get quizzed about what secret, proprietary techniques we’ll use…
Burp CO2 now sports some Laudanum Scripts!

Updates to the Burp CO2 extension suite over the past couple of months but the most exciting one is the addition of Laudanum functionality.
Burp Co2 Update v0.5 adds a Name Mangler module!

I’m excited to announce another addition to the Burp Co2 extension bundle in v0.5 of Burp Co2 (download)
Professionally Evil Software: Laudanum 1.0 release!

Secure Ideas is excited to announce the immediate release of Laudanum 1.0.
Professionally Evil: Self Inflicted Injury at Vendor’s Request

It’s an unfortunate and still too common a vulnerability to find administrative interfaces exposed and configured with default passwords.
Kismet Log Viewer v2 Tool Released

Secure Ideas actively supports open source and giving back to the community. In that light, we’re announcing the release of an updated tool…
Professionally Evil Toolkit – BozoCrack

This week I’ve been teaching a class on web app security for developers and I remembered a fun little script that I thought I’d share here.