Cатсн²² (in)sесuяitу / ChrisJohnRiley

Because we're damned if we do, and we're damned if we don't!

Tag Archives: sap

Hashdays 2011

1 Comment Posted by on October 31, 2011

I wasn’t lucky enough to make it to last years Hashdays conference, so I was both humbled and ecstatic to be selected to speak at the second edition taking place this past weekend. As this was my first time presenting at a “big time” security conference, it was both exciting and scary at the same [...]

Conference, Penetration Test, Security ,

SAP OSExecute… not the buffer overflow you’re looking for!

1 Comment Posted by on October 25, 2011

So, it’s been a busy day already… and just as I’m about to get things under control a friend links me to a post on SecurityFocus discussing this new vulnerability in SAP Management Console. Imagine my surprise when I read about this new OSExecute exploit! So, before the proverbial sh*t hits the fan, here’s a [...]

Metasploit, Penetration Test, Security , ,

Upcoming presentation: Hashdays

Leave a Comment Posted by on October 19, 2011

Time flies when you’re knee-deep in SAP internals it seems… after almost a year of really ripping into SAP Management Console Web Services I’m finally giving a presentation on the topic at the upcoming Hashdays conference in Lucerne, Switzerland. The talk, entitled “SAP (in)security: Scrubbing SAP clean with SOAP” will cover some of my research on [...]

Conference, Metasploit, Penetration Test, Security , ,

{BruCON} Attacking SAP’s J2EE Engine

1 Comment Posted by on September 20, 2011

Attacking SAP’s J2EE Engine Alexander Polyakov and Dmitriy Chastuhin Nowadays SAP NetWeaver platform is the most widespread platform for developing enterprise business applications. It’s becoming popular security topic but still not covered well. This talk will be focused on one of the black holes called SAP J2EE engine. Some of the critical SAP products like [...]

Conference, Security ,

← Older posts

Newer posts →

Follow

Get every new post delivered to your Inbox.

Join 36 other followers