19.06.2015 Views

Attacking the Giants: Exploiting SAP Internals - Cybsec

Attacking the Giants: Exploiting SAP Internals - Cybsec

Attacking the Giants: Exploiting SAP Internals - Cybsec

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

<strong>Attacking</strong> <strong>the</strong> <strong>Giants</strong>: <strong>Exploiting</strong> <strong>SAP</strong> <strong>Internals</strong><br />

PenTesting with sapyto<br />

© 2007<br />

sapyto<br />

•Firstpublic framework for performing <strong>SAP</strong> Penetration Tests.<br />

• Core dependencies: <strong>SAP</strong> RFC Library and saprfc module.<br />

• Plugin based.<br />

• Shipped with plugins for analyzing RFC vulnerabilities,<br />

auditing <strong>SAP</strong> R/3 configuration, perform <strong>the</strong> actual penetration, etc..<br />

• Developed in Python and C.<br />

Download -><br />

http://www.cybsec.com/en/research/defau<br />

27

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!