Professionally Evil Insights

Welcome to the Professionally Evil Insights blog by Secure Ideas! In this digital playground, we unravel the complex world of information security with a touch of fun. Our expert-led content ranges from deep-dives into penetration testing to explorations of hardware hacking. Whether you're curious about Secure Ideas or passionate about cybersecurity, this blog is your quick, enlightening, and entertaining guide into the captivating world of information security.

Welcome aboard!

Paths to Power in Active Directory Part 2: ESC1 – No One, Yet Anyone

penetration testing | Active Directory | Privilege Escalation | ESC1

This is the second post in this series. Part I can be found here. Planning The Take Over: Identifying the Cracks in the Wall In GOAD (Game of Active Directory), as with real-life engagements, ESC1 is often the first crack in the wall worth checking once AD CS comes into play. It’s not the beginning ...

Never miss a Professionally Evil update!

Application Security 202: Vulnerabilities Accepted

vul·ner·a·bil·i·ty The quality or state of being exposed to the possibility of being attacked or ...

Privilege Escalation via File Descriptors in Privileged Binaries

Today I wanted to cover an application security topic that applies to SetUID binaries. As we all ...