Sniffing SAP GUI Passwords?

[Joniels]

Hi guys,

Came across some interesting reading about sniffing SAP GUI passwords (http://www.conus.info/blogs/sniffing_diag.pdf). How does it look like at your environment, are you using SNC for connections to your systems?

[thx4allthefish]

This is a very interesting topic.

I hope you don't mind my shadowing this in Basis/Security.

[dennis714]

More information about this topic:
http://conus.info/utils/SAP_pkt_decompr.txt
http://conus.info/utils/#sap

[mattbartlett]

Pioneering work from the chap at http://conus.info

Thought you might be interested other developers and products are finally catching up…

SAP Password Sniffing using Wireshark:
http://www.mattbartlett.co.uk/sap-passw ... wireshark/
SAP Password Sniffing using Cain and Abel:
http://www.mattbartlett.co.uk/sap-passw ... -and-abel/