Professionally Evil Insights

Welcome to the Professionally Evil Insights blog by Secure Ideas! In this digital playground, we unravel the complex world of information security with a touch of fun. Our expert-led content ranges from deep-dives into penetration testing to explorations of hardware hacking. Whether you're curious about Secure Ideas or passionate about cybersecurity, this blog is your quick, enlightening, and entertaining guide into the captivating world of information security.

Welcome aboard!

ZAPmas Feedback

Sometimes Christmas comes early, and in this case for me it was the publication of the Twelve Days ...

12 Days of ZAPmas - Day 12 Testing a new Content-Security-Policy

Testing | application security | OWASP | web application security

What is the CSP? The Content-Security-Policy (CSP) is a widely recommended control and is ...

Twelve Days of ZAPmas - Day 11 - ZAP impressions from a Burp user

web penetration testing | Burp Suite | OWASP | web application security

It probably seems a bit odd to do this on Day 11 and not at the end of the series, but I have one ...

Twelve Days of ZAPmas - Day 10 - Manual Web App Testing Unproxied

web penetration testing | OWASP | web application security

Most of the time, proxying the browser doesn’t present any sort of trouble. You should be able to ...

Twelve Days of ZAPmas - Day 9 - Automated Scanning and ATTACK mode

application security | OWASP | automation | scanning

Automated scanning against an application is useful. It’s a faster and less labor-intensive way to ...

Twelve Days of ZAPmas - Day 8 - Spidering

OWASP | web application security

Spidering is an automated process that recursively finds and follows all the navigation from an ...

Twelve Days of ZAPmas - Day 7 - API Testing with Postman and ZAP

application security | OWASP | API

If you’ve done any significant amount of API development, there’s a good chance you’ve used ...

Twelve Days of ZAPMAS - Day 6 - Passive Flaw Detection and Using the HUD

application security | OWASP | web application security | scanning

One of the awesome things about a security-focused interception proxy like ZAP is its ability to ...

Twelve Days of ZAPmas - Day 5 - Scope and Contexts

application security | OWASP | web application security | scope

Normally I don’t like having my interception proxy hide out-of-scope traffic. Doing so creates a ...

Twelve Days of ZAPmas - Day 4 - Fuzzing for Injection

web penetration testing | application security | web application security | how-to

I briefly introduced fuzzing earlier in the series, citing it as the second primitive upon which ...

Twelve Days of ZAPmas - Day 3 - CYA (Cover Your Auth)

application security | OWASP | web application security | how-to

Access control is one of the crucial elements to application security. The vast majority of ...

1 2 3 4 5

Professionally Evil Insights

Never miss a professionally evil update!