Professionally Evil Insights

Welcome to the Professionally Evil Insights blog by Secure Ideas! In this digital playground, we unravel the complex world of information security with a touch of fun. Our expert-led content ranges from deep-dives into penetration testing to explorations of hardware hacking. Whether you're curious about Secure Ideas or passionate about cybersecurity, this blog is your quick, enlightening, and entertaining guide into the captivating world of information security.

Welcome aboard!

    Cloud-Base Host Discovery Is Easier Than You Think!
    During a recent conversation at DerbyCon it occurred to me that some security folks who are just ...
    Continue Reading
    Wireless Attacking EAP-TTLS with Kali 2 and ALFA AWUS051NH
    Is your corporate wifi as secure as you think it is? A common configuration for WPA Enterprise ...
    Continue Reading
    Professionally Evil Insights: 2015
    Are you interested in knowing which vulnerabilities are the most commonly discovered in penetration ...
    Continue Reading
    Five Outdated Security Excuses
    The Security Industry as a whole has been known to criticize businesses large and small with ...
    Continue Reading
    Introducing Burp Correlator!
    This one is for you web penetration testers! This new Burp extension is designed to help with ...
    Continue Reading
    Practical Pentest Advice from PCI
    The PCI Security Standards Council released a Penetration Testing Guidance information supplement ...
    Continue Reading
    Tip: Running BurpSuite on a Mac
    Here’s a quick tip I use to save some time when spinning up Burp Suite on a Mac. I use Burp Suite ...
    Continue Reading
    And Now... Introducing: Burp BS!
    Burp BS… where the “BS” stands for BeanShell. “What on earth is BeanShell?” you may ask? BeanShell ...
    Continue Reading
    MobiSec 2.0 Awesomeness Unleashed!
    MobiSec has undergone a major reconstruction and version 2.0 (actually 2.0.1) is now available for ...
    Continue Reading
    Don't Forget the Little Things!
    On January 31st, Deusen disclosed what was described as a Same Origin Policy Bypass flaw called ...
    Continue Reading
    CarolinaCon 11 Slides for Anatomy of Web Client Attack
    For those who have asked – my slide deck for Anatomy of Web Client Attacks can be downloaded here. ...
    Continue Reading

    Never miss a professionally evil update!