19.06.2015 Views

Attacking the Giants: Exploiting SAP Internals - Cybsec

Attacking the Giants: Exploiting SAP Internals - Cybsec

Attacking the Giants: Exploiting SAP Internals - Cybsec

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

<strong>Attacking</strong> <strong>the</strong> <strong>Giants</strong>: <strong>Exploiting</strong> <strong>SAP</strong> <strong>Internals</strong><br />

Going After <strong>the</strong> Low-Hanging Fruit<br />

© 2007<br />

RFCEXEC<br />

•Bundledwith<strong>the</strong>RFCSDK.<br />

•Works in registered mode.<br />

• Released as an example, not intended for productive use.<br />

• Provides <strong>the</strong> following functions:<br />

• RFC_RAISE_ERROR<br />

•RFC_MAIL<br />

• RFC_REMOTE_PIPE<br />

• RFC_REMOTE_FILE<br />

• RFC_REMOTE_EXEC<br />

• Protected through rfcexec.sec file directives.<br />

31

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!