Rorot

Rorot (@rorot333) is an Information Security Professional with 5.5 years of experience in Penetration testing & Vulnerability assessments of web and mobile applications. He is currently a security researcher at Infosec Institute. Twitter: @rorot333 Email: rorot33@gmail.com

Articles from Rorot

What is an XXE attack?

May 15, 2018

XXE (XML External Entity attack) is now increasingly being found and reported in major web applications such as Facebook, PayPal, etc. For instance, a quick

Learn More

Input Validation: Format Strings Attack

April 26, 2016

In languages such as C and C++, the printf-style-statements are often vulnerable to an issue called Format String Attacks. Functions such as printf, sprint,

Learn More

Java Security Guide

February 12, 2016

Java as a framework comes with certain inherent features that ensure the safety of deployed applications. However vulnerabilities in web applications still a

Learn More

Pentesting SAP applications : An introduction

November 12, 2015

SAP (Systems-Applications-Products) is a software suite that offers standard business solutions; it is used by thousands of customers across the globe to man

Learn More

Web Application Penetration Testing Methodology eBook

August 20, 2015

34 Page eBook This comprehensive eBook dives deep into Penetration Testing Methodology, covering Security in the SDLC, Information Gathering, Vulnerabilit

Learn More

Identifying Vulnerable Code

June 24, 2015

No matter how much care you take during development of any software, security issues creep in. Hence, it is important to get the code reviewed for security l

Learn More

Cracking NQ vault step by step

April 14, 2015

The mobile encryption app NQ Vault has been in the news for bad reasons. Mobile encryption apps are commonly used to prevent access to sensitive data on the

Learn More

Understanding iOS Security: Part 1

March 19, 2015

Apple uses iOS (operating system) to power many of its mobile devices such as iPhone, iPad and so on. From the beginning, security has been placed at the cor

Learn More

Session hijacking cheat sheet

January 20, 2015

'Session Hijacking' is an old and routine topic in the field of application security. To make it more interesting, in this article, we are going to focus on

Learn More

Understanding Disk Encryption on Android and iOS

November 18, 2014

Introduction Mobile devices these days handle lots of sensitive information – messages, photos, contacts and more. The question about how this data is stored

Learn More

Padding oracle attack

July 25, 2014

Firstly, this vulnerability is not related to the Oracle database or the Oracle Company in any way. In cryptography, an 'oracle' is a system that performs cr

Learn More

Can My JavaScript Access Your Page Elements?

March 28, 2014

We all know that by using JavaScript you can do many things, for example read elements on a page, analyze the DOM, etc. Now assume that you logged into faceb

Learn More