Professionally Evil Insights

Welcome to the Professionally Evil Insights blog by Secure Ideas! In this digital playground, we unravel the complex world of information security with a touch of fun. Our expert-led content ranges from deep-dives into penetration testing to explorations of hardware hacking. Whether you're curious about Secure Ideas or passionate about cybersecurity, this blog is your quick, enlightening, and entertaining guide into the captivating world of information security.

Welcome aboard!

Being Safe and Secure with Cross-Origin Messaging

security | JavaScript | application | web | cross-origin

Complex web and mobile apps often depend on cross-domain interactions between different online services, but the web browser’s security model restricts them by default via the Same-Origin Policy. A variety of approaches have been used to address this need. JSONP solved this by using script tags to ...

Never miss a Professionally Evil update!

Steam Deck Privacy and Security

security | Gaming | Privacy

Like any portable computing device, there are going to be questions about privacy and security. The ...

Quick Bites Episode 2 - HTTP Security Headers and Why You NEED Them

security | application security | web application security | methodology | technology tips

Hi everybody! So, after some feedback about the last “quick” Quick Bites (thanks Josh!), I’ve ...

Surveillance System with No Monthly Fees!

security | network | camera | Free | surveillance

PowerShell Tips: How do I Mount a VHD or Lock a BitLocker Drive?

PowerShell Tips How do I Mount a VHD or Lock a BitLocker Encrypted Drive?

Digging Between the Couch Cushions - CouchDB CVE-2021-38295 Breakdown

Introduction In this blog post we’re going to take a look at the recent CouchDB vulnerability, ...

ViewState XSS: What's the Deal?

As penetration testers, there are many different technologies that we have to be familiar with. The ...

Testing ASP.Net WebForms: Request Method Validation

Testing | security | web penetration testing

As a professional penetration tester, there are many features of an application that are similar ...

SamuraiWTF 2.0? What happened to 1.0?

So the SamuraiWTF project have released the first few release candidates for the formal 2.0 ...

How to Setup RatProxy on Windows

developers | QA | security | testers

In an effort to help developers and other windows users get started adding security testing into ...