With BIGDATA Comes BIG Responsibility - Practical Exploiting of MDX Injections

Explore the vulnerabilities of Business Intelligence systems and OLAP technology in this 45-minute Black Hat USA 2013 conference talk. Delve into the world of Business Warehouses and Big Data, examining how OLAP has replaced traditional OLTP systems for processing large datasets. Learn about key concepts such as OLAP cubes, measures, dimensions, XMLA, and the MDX query language. Discover potential security risks associated with MDX-related attacks, including code injection and data retrieval vectors. Gain insights into exploiting MDX injections across various systems, understand post-exploitation techniques, and receive a practical cheat-sheet and tool for simplifying MDX Injection attacks. Presented by Dmitry Chastuhin and Alexander Bolshev, this talk offers valuable knowledge for security professionals and those interested in the intersection of Big Data and cybersecurity.