RedRays

17/10/2024

🚨 New Release Alert! 🚨

We're excited to announce that RedRays has published a Proof of Concept (PoC) for the recent code injection vulnerability in SAP NetWeaver AS Java Log Viewer (CVE-2024-22127). This PoC demonstrates how the vulnerability can be exploited and highlights the importance of implementing SAP's security patches promptly.

💻 Protect your SAP systems and stay one step ahead of potential threats. Check out the full details on our website and see how RedRays can help you secure your SAP environment effectively.

🔗 Learn more about the vulnerability and our PoC here:https://redrays.io/blog/poc-sap-note-3433192-code-injection-vulnerability-in-sap-netweaver-as-java/

Learn about the critical code injection vulnerability (CVE-2024-22127) in SAP NetWeaver AS Java Log Viewer plug-in. Discover mitigation steps and best practices to secure your SAP environment.

30/09/2024

🚀 Exciting Update for SAP Security! 🚀

We are thrilled to announce the upcoming release of our Segregation of Duties (SoD) Module within the RedRays Security Platform! 🎉

With this module, identifying users who can alter critical SAP tables, like T000, or execute critical T-codes - becomes a breeze. Our SoD reports ensure that you can quickly detect potential violations and secure your SAP environment against unauthorized changes. This is just another step forward in our mission to provide comprehensive SAP security solutions tailored to your business needs.

Stay tuned for the full release! 🔒

03/09/2024

🔐 Enhance Your SAP Security Skills with Hands-On Training! 🖥️

RedRays is excited to announce our Practical SAP Security Course!

Are you ready to take your SAP security expertise to the next level? Our intensive, hands-on course is designed for both intermediate and advanced professionals looking to gain real-world skills in SAP pe*******on testing and vulnerability assessment.

🔍 What you'll learn:
- Practical SAP vulnerability detection and exploitation techniques
- Hands-on experience with SAP attack vectors and mitigation strategies
- Real-world SAP landscape security assessment

🗓️ Course details:
- Duration: 3 days
- Delivery: Online or on-site options available
- Led by Vahagn Vardanyan, recognized expert in enterprise application security

💡 Why choose our course:
- Focus on practical, hands-on exercises
- Small class sizes for personalized attention
- Access to exclusive tools used by RedRays professionals

Don't miss this opportunity to boost your SAP security skills with real-world experience!

👉 Learn more and register: https://redrays.io/sap-security-training/

hashtag hashtag hashtag *******onTesting hashtag hashtag

Elevate your SAP security skills with RedRays' comprehensive 3-day course. Learn advanced pe*******on testing, vulnerability assessment, and mitigation strategies. Online and on-site options available.

03/09/2024

🔐 Enhance Your SAP Security Skills with Hands-On Training! 🖥️

RedRays is excited to announce our Practical SAP Security Course!

Are you ready to take your SAP security expertise to the next level? Our intensive, hands-on course is designed for both intermediate and advanced professionals looking to gain real-world skills in SAP pe*******on testing and vulnerability assessment.

🔍 What you'll learn:
- Practical SAP vulnerability detection and exploitation techniques
- Hands-on experience with SAP attack vectors and mitigation strategies
- Real-world SAP landscape security assessment

🗓️ Course details:
- Duration: 3 days
- Delivery: Online or on-site options available
- Led by Vahagn Vardanyan, recognized expert in enterprise application security

💡 Why choose our course:
- Focus on practical, hands-on exercises
- Small class sizes for personalized attention
- Access to exclusive tools used by RedRays professionals

Don't miss this opportunity to boost your SAP security skills with real-world experience!

👉 Learn more and register: https://redrays.io/sap-security-training/

hashtag hashtag hashtag *******onTesting hashtag hashtag

03/09/2024

🚀 Exciting News for SAP Security Professionals! 🛡️

We are proud to announce that the OWASP community has approved the OWASP SAP Threat Modeling Builder! 🎉

This open-source tool is for SAP Administrators and Security professionals:

✅ Map inter-SAP connections comprehensively
✅ Identify potential security risks and vulnerabilities
✅ Visualize your SAP network with an interactive graph
✅ Detect risky connections between production and non-production systems
✅ Enhance compliance efforts and security posture

Key features:
• Credential management for multiple SAP systems
• Automated scanning and discovery
• Filtering capabilities for focused analysis
• Support for security risk assessment

Whether you're conducting security audits, ensuring compliance, or managing SAP landscapes, this tool is designed to make your job easier and more effective.

Check it out on: https://owasp.org/www-project-sap-threat-modeling-builder/ #

hashtag hashtag hashtag hashtag hashtag

A comprehensive tool for visualizing and analyzing inter-SAP connections to identify potential security risks

03/09/2024

We're excited to announce the launch of our ABAP code analyzer! 🚀

Our team has developed a powerful tool to help SAP customers identify and mitigate security vulnerabilities in their ABAP code.

This scanner performs comprehensive static code analysis to detect issues like:
- Cross-site scripting (XSS)
- SQL injection
- Directory traversal
- OS command injection
- And many more!

Our Platform provides detailed reports to help development teams quickly locate and fix potential security flaws.

Secure your SAP systems and improve code quality with RedRays ABAP Scanner.

hashtag hashtag hashtag hashtag

A Python tool for scanning offline SAP ABAP source code to detect security vulnerabilities

08/07/2024

🚀 Exciting News from RedRays! 🚀

We're thrilled to introduce our innovative Hybrid SAP Pentest service, revolutionizing the way SAP security assessments are conducted.

🔍 What is Hybrid SAP Pentest? It's a groundbreaking approach that combines our advanced automated scanning technology with expert human analysis, offering unparalleled depth and efficiency in SAP security testing.

🌟 Key Benefits:
- Faster vulnerability detection
- More comprehensive coverage
- Expert insights from SAP security specialists
- Actionable recommendations for remediation

Whether you're a pentesting company looking to enhance your SAP offerings, or an organization seeking to bolster your SAP security, our Hybrid SAP Pentest service is designed to meet your needs.

Want to learn more about how we can elevate your SAP security testing?
👉 Visit
https://redrays.io/hybrid-sap-pentetration-testing-service
for details or contact us for a free consultation.

hashtag hashtag hashtag hashtag

Elevate your SAP security with RedRays' Hybrid SAP Pentest. Combine automated scanning with expert analysis for efficient, comprehensive vulnerability detection and actionable insights.

02/05/2024

🔒 Secure your SAP BTP applications with SAP SE's upcoming event!

Join us on May 7-8 to explore critical aspects of SAP BTP security, including shared responsibility, OWASP Top 10 vulnerabilities, proactive security measures, and best practices for development. Learn from industry experts and discover how to protect your business in the cloud. Book your seat now!

https://redrays.io/blog/sap-btp-security-event/

Join SAP SE's event on May 7-8 organized by RedRays to delve into SAP BTP security, focusing on custom applications. Learn about shared responsibility, OWASP Top 10 vulnerabilities, proactive security measures, best practices for development, and the importance of security testing. Gain insights int...

11/03/2024

Hey SAP Security Users! 👋

🚀 We have just released a video exploring the functionalities of our Platform scanning SAP systems to detect vulnerabilities in just 5 minutes. Our platform can be used for white-box 📦 and black-box 🖤 pe*******on testing and threat modeling.

*******onTesting

The video "SAP Pe*******on Testing by Whitebox and Blackbox Method using RedRays Security Platform" provides a practical approach to securing SAP systems usi...