The truth about ABAP security
- Type
- Slides
- Tags
- ABAP, SAP
- Authors
- Ertunga Arsal
- Event
- Hashdays 2010
- Indexed on
- Mar 27, 2013
- URL
- https://www.hashdays.ch/assets/files/slides/arsal_the_truth_about_abap_security.pdf
- File name
- arsal_the_truth_about_abap_security.pdf
- File size
- 463.3 KB
- MD5
- 39e341eec46ef7963f47384e49052903
- SHA1
- 74d02f840568251fab96935bcb36390969b04d7b
ABAP is the programming language used for developing ERP applications on SAP® systems. The ABAP stack runs similar to “kernel mode” and it has access to most critical components. Any programming mistake can have disastrous effects. Whether for adding another “root” (SAP_ALL) user to the system or for stealing password hashes, it on the shopping list of most SAP hackers. Our talk focuses on insecure ABAP code, how to exploit it and how to prevent future mistakes.
About us
Secdocs is a project aimed to index high-quality IT security and hacking documents. These are fetched from multiple data sources: events, conferences and generally from interwebs.
Statistics
Serving 8166 documents and 531.0 GB of hacking knowledge, indexed from 2419 authors from 163 security conferences.
Contribute
To support this site and keep it alive, you can click on the buttons below. Any help is really appreciated! This service is provided for free, but real money is needed to pay bills.
