SAP strikes back. Your SAP server now counter-attacks
SAP strikes back. Your SAP server now counter-attacks
Presented at TROOPERS17 (2017),
March 22, 2017, 2:30 p.m.
(Unknown duration)
In this presentation, we will demonstrate how attackers can compromise all SAP clients and gain private information from their machines by using the SAP server.
Presenters:
Dmitry Yudin Dmitry Yudin is a security researcher at ERPScan. Exploit developer, bug hunter, Linux fan.
Vahagn Vardanyan Vahagn Vardanyan is a security researcher at the ERPScan company. He has over 60 public CVE's, including 50 ones for SAP. Identified vulnerabilities in PHP, libxml2, and LibTIFF.