Chained to Hit - Discovering New Vectors to Gain Remote and Root Access in SAP Enterprise Software

Chained to Hit - Discovering New Vectors to Gain Remote and Root Access in SAP Enterprise Software

Explore critical vulnerabilities in SAP enterprise software through this Black Hat conference talk. Delve into the findings of multiple month-long research projects conducted by the Onapsis Offensive Research labs, focusing on the analysis of "P4," a proprietary protocol based on RMI. Learn about the tactics and techniques used to uncover these vulnerabilities, and understand the potential risks they pose to mission-critical application systems. Gain insights into how combining seemingly unrelated research projects led to the discovery of critical exploitation chains. Discover the importance of securing often-overlooked enterprise software and the potential consequences of leaving such systems exposed to untrusted networks.