PROFESSIONALLY EVIL BLOG

We Break Things For a Living.

We Also Write About Things.

Our expert-led content ranges from deep-dives into penetration testing to explorations of hardware hacking. In this digital playground, we unravel the complex world of information security with a touch of fun. Whether you’re curious about Secure Ideas or passionate about cybersecurity, this blog is your quick, enlightening, and entertaining guide into the captivating world of information security. 

Professional Insights Blog

Latest Post

ShadowSaaS Surface Scanner v1.1: Silence Is the Vulnerability

ShadowSaaS Surface Scanner, the tool I introduced in a previous article, has picked up proxy support in the newly released v1.1. The reason for adding that support is less about the scanner and more about how real engagements actually work.

...
Read More ›

All Entries

default

Introduction to Laudanum

As a security consultant, there are so many scenarios that I run into every day that there is no one tool or script that solves...
Read ›
default

Hi, I’m with IT and I’m Here to Steal From You

Beware of the Unknown IT Grunt I decided to continue on with the same theme as Kevin’s post about the delivery guy....
Read ›
default

Spear Phishing: “You guys are Shady!”

This post is part of our Professionally Evil series of posts that discuss some of the experiences we have had as Security Consultants....
Read ›
default

Happy New Years!

As we finish 2012 and look forward to 2013, Secure Ideas’ staff would like to wish everyone a happy new year....
Read ›
Don’t Trust the Replacement Delivery Guy

Don’t Trust the Replacement Delivery Guy

Here at Secure Ideas we have had a ton of fun experiences during our work....
Read ›
default

Installing RatProxy on Windows Webcast

A few months ago I did the original Installing RatProxy on Windows blog post that describes both how to install Cygwin (required for RatProxy) and...
Read ›
default

Grey Box Penetration Testing

A common question I get from potential clients is “what is grey box testing and why do we need it?”...
Read ›
default

SH5ARK: Taking a Byte out of HTML5

The new features in HTML5 have opened a whole new world of opportunities for developers and for attackers. Secure Ideas recognized this and with the...
Read ›
default

How To: Encrypting Mac Mail

As a security consultant, frequently traveling, it is critical to implement security controls to protect sensitive data on my computer....
Read ›
default

Ninja Developer Talk at Louisville Metro Infosec Conference

I recently attended, and spoke, at the Louisville Metro Infosec Conference (http://louisvilleinfosec.com/) in Kentucky....
Read ›
default

ViewState XSS: What’s the Deal?

As penetration testers, there are many different technologies that we have to be familiar with. The more we know and understand, the better......
Read ›
default

Testing ASP.Net WebForms: Request Method Validation

As a professional penetration tester, there are many features of an application that are similar across all languages....
Read ›

Get the Debrief in Your Inbox

New findings, series updates, and usually some bad puns. Delivered when we actually have something worth saying.

No spam. Unsubscribe whenever. We’re evil, not rude.

This website uses cookies

We use cookies to personalize content, provide social media features, and analyze our traffic. We also share information about your use of our site with our analytics partners. You can change your preferences at any time. For more information, please see our Privacy Policy