Preliminary research

One Ticket to Rule Them All: Authorization and Authentication in SAP

Aloïs Colléaux-Le Chêne · SSTIC / Synacktiv · 4 June 2026

AI-collected research leads through 3 November 2026, including a November–October–September missed-article review and a targeted multilingual search alongside earlier community-source sweeps. Unranked, incomplete, not community-vetted, and subject to change.

Bissap extracts SAP authorization tables for offline analysis of dangerous permission combinations. A worked case uses file-download rights to obtain the system's PSE signing key, then constructs a compatible CMS-signed Logon Ticket to impersonate a privileged WebGUI user. The paper explains the ticket format, required access and explicit ASN.1 NULL parameters.

Record

Researcher

Aloïs Colléaux-Le Chêne

Published by

SSTIC / Synacktiv

Date

4 June 2026

In the archive

• Collected in the 2026 preliminary research sweep

Related sources

• English conference slides
• Permission auditing tool
• Ticket format and signing code

Tags

• privilege-escalation
• auth-bypass
• crypto
• access-control
• owasp-a01-2021
• owasp-a02-2021

This page is the archive's own catalogue record. The research is the work of Aloïs Colléaux-Le Chêne, first published at the original source. Preserved copies are kept so the citation survives its host.