Hacking and Securing SAP Hana Applications from a Penetration Testers Point of View

This talk will show the different application programming languages which the SAP HANA platform offers and how coding defects can be attacked, exploited, and secured.

SAP Hana builds the foundation for SAP S/4 and the SAP Cloud Plattform. Hana can run as a standalone database but ships with an own application server independently of the SAP NetWeaver platform. This talk will give an overview about the different languages SAP HANA offers, like Javascript/Node.js, Java, and SQLscript. You’ll learn how custom applications can be attacked, exploited, and secured.