Client Portal
Contact Us

Professionally Evil Insights

Welcome to the Professionally Evil Insights blog by Secure Ideas! In this digital playground, we unravel the complex world of information security with a touch of fun. Our expert-led content ranges from deep-dives into penetration testing to explorations of hardware hacking. Whether you're curious about Secure Ideas or passionate about cybersecurity, this blog is your quick, enlightening, and entertaining guide into the captivating world of information security.

Welcome aboard!

    Featured Image
    What happened to CVE-2022-23529? And what can we learn from it?
    Vulnerability |  developers |  information security |  analysis
    If you saw the disclosure notice for the flaw CVE-2022-23529, it would have been presented as a remote code execution flaw (via JWT secret poisoning) in the jwt.verify method of a main Node.js package for working with JSON Web Tokens (JWTs). The package in question is Auth0’s node_jsonwebtoken ...
    Continue Reading

    Never miss a Professionally Evil update!

    Sign Up For Our Newsletter
    Digging Between the Couch Cushions - CouchDB CVE-2021-38295 Breakdown
    Digging Between the Couch Cushions - CouchDB CVE-2021-38295 Breakdown
    Introduction In this blog post we’re going to take a look at the recent CouchDB vulnerability, ...
    Continue Reading
    ViewState XSS: What's the Deal?
    ViewState XSS: What's the Deal?
    Testing  |  developers  |  QA  |  security  |  testers  |  web penetration testing
    As penetration testers, there are many different technologies that we have to be familiar with. The ...
    Continue Reading
    How to Setup RatProxy on Windows
    How to Setup RatProxy on Windows
    developers  |  QA  |  security  |  testers
    In an effort to help developers and other windows users get started adding security testing into ...
    Continue Reading