Professionally Evil Insights

Welcome to the Professionally Evil Insights blog by Secure Ideas! In this digital playground, we unravel the complex world of information security with a touch of fun. Our expert-led content ranges from deep-dives into penetration testing to explorations of hardware hacking. Whether you're curious about Secure Ideas or passionate about cybersecurity, this blog is your quick, enlightening, and entertaining guide into the captivating world of information security.

Welcome aboard!

Twelve Days of ZAPmas - Day 8 - Spidering

OWASP | web application security

Spidering is an automated process that recursively finds and follows all the navigation from an ...

Twelve Days of ZAPmas - Day 7 - API Testing with Postman and ZAP

application security | OWASP | API

If you’ve done any significant amount of API development, there’s a good chance you’ve used ...

Twelve Days of ZAPMAS - Day 6 - Passive Flaw Detection and Using the HUD

application security | OWASP | web application security | scanning

One of the awesome things about a security-focused interception proxy like ZAP is its ability to ...

Twelve Days of ZAPmas - Day 5 - Scope and Contexts

application security | OWASP | web application security | scope

Normally I don’t like having my interception proxy hide out-of-scope traffic. Doing so creates a ...

Twelve Days of ZAPmas - Day 4 - Fuzzing for Injection

web penetration testing | application security | web application security | how-to

I briefly introduced fuzzing earlier in the series, citing it as the second primitive upon which ...

Twelve Days of ZAPmas - Day 3 - CYA (Cover Your Auth)

application security | OWASP | web application security | how-to

Access control is one of the crucial elements to application security. The vast majority of ...

Twelve Days of ZAPmas - Day 2 - The Edge of Tomorrow

Day 2 - The Edge of Tomorrow - Replaying and Tampering with Requests Fuzzing and tampering are like ...

Twelve Days of ZAPmas - Day 1 - Setting Up ZAP

web penetration testing | application security | OWASP | web application security | how-to

This holiday season, I’m going to run down some of the ins and outs of working with OWASP Zed ...

Quick Bites Ep 6 - Good Hygiene is IMPORTANT, PEOPLE!

So, I just missed a week of work because of the flu (it wasn’t COVID, I got tested). The flu SUCKS. ...

How to iterate through advfirewall rules

There are several ways to pull firewall information from a Windows system. Today we will leverage ...

Introduction to Writing Nmap Scripting Engine (NSE) Scripts

NMAP | programming | NSE

One thing I notice a lot of people are missing in their skill set as security professionals is the ...

2 3 4 5 6

Professionally Evil Insights

Never miss a professionally evil update!