PROFESSIONALLY EVIL BLOG

We Break Things For a Living.

We Also Write About Things.

Our expert-led content ranges from deep-dives into penetration testing to explorations of hardware hacking. In this digital playground, we unravel the complex world of information security with a touch of fun. Whether you’re curious about Secure Ideas or passionate about cybersecurity, this blog is your quick, enlightening, and entertaining guide into the captivating world of information security. 

Professional Insights Blog

Latest Post

ShadowSaaS Surface Scanner v1.1: Silence Is the Vulnerability

ShadowSaaS Surface Scanner, the tool I introduced in a previous article, has picked up proxy support in the newly released v1.1. The reason for adding that support is less about the scanner and more about how real engagements actually work.

...

All Entries

How much does a Penetration Test Cost?

How much does a Penetration Test Cost?

This article describes what the cost of a penetration test from Secure Ideas is, as well as ways to affect the final bill....
Straight Facts: Testing as a Service Dispatches the Goods

Straight Facts: Testing as a Service Dispatches the Goods

Most InfoSec professionals see rapid tech advances changing security approaches, prompting the need for solutions beyond the status quo....
NMAP in Action: API's

NMAP in Action: API’s

Enhance network reconnaissance with NMAP's nmap-graphql-introspection-nse script to identify GraphQL endpoints and detect introspection...
What is a Threat Led Penetration Test?

What is a Threat-Led Penetration Test?

Explore Secure Ideas' expert approach to Threat-Led Pen Testing (TLPT) and proactive cybersecurity strategies....
Tartar Sauce for your Phishing Program

Tartar Sauce for your Phishing Program

Ready-to-go open-source resources to refine your phishing awareness campaigns. These tools will help combat security risk while not being overly intrusive....
From Linux to PowerShell and Back: A Quick Command Reference

From Linux to PowerShell and Back: A Quick Command Reference

A comparison between Linux commands and their PowerShell equivalent. You’ll be able to navigate around a system more effectively with the other....
Unleashing the Power of Hackathons

Unleashing the Power of Hackathons

Enhance cybersecurity with hackathons by Secure Ideas. Collaborate, identify vulnerabilities, and boost your skills through hands-on training events....
Flipper Zero: Hardware Hacking JTAG and SWD Webcast

Flipper Zero: Hardware Hacking JTAG and SWD Webcast

Next in our series this June: Demystifying JTAG and SWD for firmware extraction, debugging, and hardware reverse engineering!...
The Client Side Security Trap: A Warning For Developers

The Client-Side Security Trap: A Warning For Developers

Shed light on the importance of a balanced approach to security, emphasizing the critical role of server-side controls alongside client-side mechanisms...
Buckle Up: Ride Along with the Professionally Evil Experts

Buckle Up: Ride Along with the Professionally Evil Experts

Experience our ride-along penetration test: Collaborate with our experts virtually or in-person for an integrated cybersecurity assessment....
Top 5 Security Considerations for a New Web App: 5. Establishing a Dependency Patching Plan

Top 5 Security Considerations for a New Web App: 5. Establishing a Dependency Patching Plan

Establishing a robust dependency patching plan is crucial for maintaining the security integrity of web applications....
Top 5 Security Considerations for a New Web App: 4. Logging & Monitoring

Top 5 Security Considerations for a New Web App: 4. Logging & Monitoring

The roles of logging and monitoring are paramount, acting as critical components for maintaining the integrity and resilience of online platforms....

Get the Debrief in Your Inbox

New findings, series updates, and usually some bad puns. Delivered when we actually have something worth saying.

No spam. Unsubscribe whenever. We’re evil, not rude.

This website uses cookies

We use cookies to personalize content, provide social media features, and analyze our traffic. We also share information about your use of our site with our analytics partners. You can change your preferences at any time. For more information, please see our Privacy Policy