Injecting Axapta — Attacks on Business Data in Microsoft Dynamics AX
Author: Dmitry Yerusov
The speaker will tell about how to leverage the peculiarities of the three-tier ERP system Microsoft Dynamics AX (previously known as Axapta), in order to obtain access to a system’s domain admin account and enterprise data via an X++ injection.
Dmitry Yerusov graduated from the Bauman Moscow State Technical University specializing in plasma power generators. Over the last 10 years has been developing and deploying solutions based on the Axapta ERP system. From 2003 till 2010 worked for Favorit Motors, since 2010 holds the post of IT director in a railway company.