Bizploit - The Opensource ERP Penetration Testing Framework has been released
Onapsis Research Labs is proud to announce the release of Bizploit, the first opensource ERP Penetration Testing framework. Presented at HITB Dubai, one of the most renowned security conferences in the world, Bizploit is expected to provide the security community with a basic framework to support the discovery, exploration, vulnerability assessment and exploitation of ERP systems.
The term "ERP Security" has been so far understood by most of the IT Security and Auditing industries as a synonym of “Segregation of Duties”. While this aspect is absolutely important for the overall security of the Organization's core business platforms, there are other threats that are still overlooked and imply much higher levels of risk. Onapsis Bizploit is designed as an academic proof-of-concept that will help to illustrate these kind of risks.
Currently Onapsis Bizploit is shipped with modules focused in the SAP business platform, but updates for other popular ERPs are expected to be included in the short term.L33tdawg: Mariano will also be conducting a SAP Security In Depth training at HITB2010 Amsterdam. You definitely don't want to miss this!
