erpwnage: A Red Team Approach to Targeting SAP Enterprise Systems
Austin Marck demonstrates red team tradecraft for targeting SAP and ERP platforms, demonstrating protocol exploitation, RFC abuse, and business logic takeover.
Summary
SAP and ERP Systems as High-Value Crown Jewels
Enterprise Resource Planning (ERP) platforms like SAP manage critical financial records, payroll, and supply chain operations, making them prime targets for threat actors.
Deconstructing SAP Protocols and Communication Interfaces
Austin Marck analyzes the complex communication layers of SAP architectures—including SAP GUI, RFC gateways, DIAG protocols, and web services.
Executing Remote RFC Abuse and Business Logic Takeover
The speaker demonstrates discovering unauthenticated RFC functions, abusing default service users, and escalating privileges to execute operating system commands.
Hardening SAP Infrastructure and Monitoring TTPs
The presentation provides enterprise defenders with SAP security baselines, network segregation patterns, and guidance for auditing sensitive transaction logs.
Related talks
Red Team Village·58 min
Tyler Boykin
Tyler Boykin reviews Linux privilege escalation vectors stemming from sudoers misconfigurations, from common GTFOBins low-hanging fruit to subtle binary abuse.
Main Stage·54 min
Christopher Panayi
Christopher Panayi demonstrates exploiting Microsoft Endpoint Configuration Manager (MECM/SCCM) OS deployment mechanisms and network booting to extract enterprise Active Directory credentials.
Adversary Village·30 min
Carlos Polop
Carlos Polop presents the new generation of PEAS (LinPEAS/WinPEAS), revealing advanced local privilege escalation techniques across Windows, Linux, and AD.