Overview
Syllabus
Intro
Attacking the Core
Attack Vectors
How can it be attacked?
What is a Business Process?
Example: Attacking the Business Processes
Determining Victim Bank Accounts
Changing the Bank Accounts
End of Chapter!
Credit Card Processing on SAP
Credit Card Data
Accessing Cleartext Cardholder information
Free Tool? - Sapsucker
Decrypting Encrypted Credit Card Numbers
External Vendors for Payment Solutions
Standard Concept
External Payment Card Interface Connectivity
Address The Complete Picture
Implement a Holistic Process to Stay Secure
Automate it
The Menu of SAP Security
Taught by
Black Hat