What is an XXE attack?
XXE (XML External Entity attack) is now increasingly being found and reported in major web applications such as Facebook, PayPal, etc. For instance, a quick...
Rorot
Rorot (@rorot333) is an Information Security Professional with 5.5 years of experience in Penetration testing & Vulnerability assessments of web and mobile applications. He is currently a security researcher at Infosec Institute. Twitter: @rorot333 Email: rorot33@gmail.com
Input Validation: Format Strings Attack
In languages such as C and C++, the printf-style-statements are often vulnerable to an issue called Format String Attacks. Functions such as printf, sprint,...
Java Security Guide
Java as a framework comes with certain inherent features that ensure the safety of deployed applications. However vulnerabilities in web applications still...
Pentesting SAP applications : An introduction
SAP (Systems-Applications-Products) is a software suite that offers standard business solutions; it is used by thousands of customers across the globe to manage...
Web Application Penetration Testing Methodology eBook
34 Page eBook
This comprehensive eBook dives deep into Penetration Testing Methodology, covering Security in the SDLC, Information Gathering, Vulnerability...
Identifying Vulnerable Code
No matter how much care you take during development of any software, security issues creep in. Hence, it is important to get the code reviewed for security...
Cracking NQ vault step by step
The mobile encryption app NQ Vault has been in the news for bad reasons. Mobile encryption apps are commonly used to prevent access to sensitive data on the...
Understanding iOS Security: Part 1
Apple uses iOS (operating system) to power many of its mobile devices such as iPhone, iPad and so on. From the beginning, security has been placed at the core...
Session hijacking cheat sheet
'Session Hijacking' is an old and routine topic in the field of application security. To make it more interesting, in this article, we are going to focus on...
Understanding Disk Encryption on Android and iOS
Introduction
Mobile devices these days handle lots of sensitive information – messages, photos, contacts and more. The question about how this data is stored...