PROFESSIONALLY EVIL BLOG

We Break Things For a Living.

We Also Write About Things.

Our expert-led content ranges from deep-dives into penetration testing to explorations of hardware hacking. In this digital playground, we unravel the complex world of information security with a touch of fun. Whether you’re curious about Secure Ideas or passionate about cybersecurity, this blog is your quick, enlightening, and entertaining guide into the captivating world of information security. 

Professional Insights Blog

Latest Post

ShadowSaaS Surface Scanner v1.1: Silence Is the Vulnerability

ShadowSaaS Surface Scanner, the tool I introduced in a previous article, has picked up proxy support in the newly released v1.1. The reason for adding that support is less about the scanner and more about how real engagements actually work.

...
Read More ›

All Entries

Red Teaming Not What You May Have Thought

Red Teaming – Not What You May Have Thought

I’ve been doing a lot of reading on some less technical topics and I ran across “Red Team: How to Succeed By Thinking Like the...
Read ›
Five Outdated Security Excuses

Five Outdated Security Excuses

The Security Industry as a whole has been known to criticize businesses large and small with respect to how they manage security....
Read ›
default

Introduction to Metasploit Webcast

Whether you’re goal is to become a commercial penetration tester, to demonstrate the risk of a vulnerability, or just need to identify certain weaknesses.....
Read ›
default

Introducing Burp Correlator!

This new Burp extension is designed to help with efficiency when you are testing a complex application full of parameters or a series of applications....
Read ›
default

Practical Pentest Advice from PCI

The PCI Security Standards Council released a Penetration Testing Guidance information supplement in March 2015....
Read ›
Tip: Running BurpSuite on a Mac

Tip: Running BurpSuite on a Mac

Quick tip to save some time when spinning up Burp Suite on a Mac. Use Burp Suite frequently enough that having an icon on my...
Read ›
default

Patching binaries with Backdoor Factory

Downloaded binary files from the Internet or grabbed one off of a network share that is used by your organization to store commonly used software?...
Read ›
default

Don’t Forget the Little Things!

On January 31st, Deusen disclosed what was described as a Same Origin Policy Bypass flaw called “Universal XSS” in IE 9 through 11 on Full...
Read ›
default

Adventures in LDAP Injection: Exploiting and Fixing

Every pen tester looks forward to that next encounter that includes one of those uncommon vulnerabilities....
Read ›
default

SamuraiWTF 3.0 and into the future!

We are really excited to announce that SamuraiWTF 3.0 is now available publicly....
Read ›
Burp CO2 now sports some Laudanum Scripts!

Burp CO2 now sports some Laudanum Scripts!

Updates to the Burp CO2 extension suite over the past couple of months but the most exciting one is the addition of Laudanum functionality....
Read ›
default

SQLite: the good, the bad, the embedded database

SQLite is an embedded, open-source, lightweight SQL database engine. The C based library is transactional, self-contained, and highly compact....
Read ›

Get the Debrief in Your Inbox

New findings, series updates, and usually some bad puns. Delivered when we actually have something worth saying.

No spam. Unsubscribe whenever. We’re evil, not rude.

This website uses cookies

We use cookies to personalize content, provide social media features, and analyze our traffic. We also share information about your use of our site with our analytics partners. You can change your preferences at any time. For more information, please see our Privacy Policy