Uncovering SAP Vulnerabilities: Reversing and Breaking the Diag Protocol

No ratings

Presented at DEF CON 20 by

Martin Gallo

This talk is about taking SAP penetration testing out of the shadows and shedding some light into SAP Diag, by introducing a novel way to uncover vulnerabilities in SAP software through a set of tools that allows analysis and manipulation of the SAP Diag protocol. In addition, we will show how these tools and the knowledge acquired while researching the protocol can be used for vulnerability research, fuzzing and practical exploitation of novel attack vectors involving both SAPs client and server applications: man-in-the-middle attacks, RFC calls injection, rogue SAP servers deployment, SAP GUI client- side attacks and more. As a final note, this presentation will also show how to harden your SAP installations and mitigate these threats.