Dmitry Chastuhin

Lead SAP Security Analyst at ERPScan

Dmitry Chastuhin is a Director of Security Consulting at ERPScan. He specializes in SAP security, web applications, JAVA, HANA and mobile solutions. He was officially acknowledged by SAP for the vulnerabilities found. Chastuhin detected several critical bugs in Google, Nokia and Badoo. He participated as a speaker at the following conferences: BlackHat, Hack in the Box, DeepSec and BruCON.

Social Profiles

All Sessions by Dmitry Chastuhin

  • OPCDE 2019 (Day 1)


  • 13:30  - 14:15
    This talk is disclosing novel attack vectors targeting Gateway and Message Server components on SAP application servers. We publish new opensource tools and improvements on existing one. Our journey begins from a wild guess on potential issue to reverse of SAP network protocols and implementation of exploits that can do full takeover of SAP servers by abusing some trust issues via anonymous network access.
    Industrial Security




Share

Dmitry Chastuhin