Cатсн²² (in)sесuяitу / ChrisJohnRiley

Because we're damned if we do, and we're damned if we don't!

Tag Archives: sap

The CSRF that almost was…

1 Comment Posted by on January 8, 2012

It’s strange sometimes where your inspiration comes from, but regardless of where, it’s good to be back in the saddle when it comes to really enjoying some research. Some people close to me might already be aware, but I’ve not really been “into it” for a while now, as can be seen by the lack [...]

Penetration Test, Security , , ,

SecZone 2011: SAP (in)security Slides

Leave a Comment Posted by on December 11, 2011

As I said in my previous blogpost, SecZone was a great experience. I took the feedback I got from my Hashdays talk on the same subject and improved on some of the aspects of my talk. Although the changes are minor and no new research content was added, I’ve uploaded the slides to slideshare for [...]

Conference, Penetration Test, Security , ,

DEEPSEC: Your crown jewels online: Further Attacks to SAP Web Applications

Leave a Comment Posted by on November 18, 2011

Your crown jewels online: Further Attacks to SAP Web Applications Mariano Nunez Di Croce Introduction to SAP Largest provider of business management solutions in the world 140,000 implementations > 90,000 customers 120 countries SAP runs the most critical business process of many companies –> Hence the crown jewels of a company This talk covers threats [...]

Conference, Security , ,

Hashdays 2011

1 Comment Posted by on October 31, 2011

I wasn’t lucky enough to make it to last years Hashdays conference, so I was both humbled and ecstatic to be selected to speak at the second edition taking place this past weekend. As this was my first time presenting at a “big time” security conference, it was both exciting and scary at the same [...]

Conference, Penetration Test, Security ,

← Older posts

Follow

Get every new post delivered to your Inbox.