Ignacio Favro
Ignacio Favro is a Senior Security Researcher at Onapsis, where he specializes in identifying and mitigating vulnerabilities in business-critical applications. With a background in computer science and extensive experience in cybersecurity, Ignacio plays a pivotal role in advancing the security research efforts of Onapsis. His contributions focus on safeguarding enterprise systems, including SAP, by uncovering risks and developing strategies to enhance cyber resilience.
Hash Cracking and the SAP Landscape
Last Updated: 12/19/2025 Introduction to Hash Cracking The Bottom Line: SAP systems frequently prioritize backward compatibility, leading to the storage of weak, easily crackable password hashes (such as MD5-based CODVN B) alongside stronger modern standards. Attackers exploit this by extracting these legacy hashes from database tables like USR02 and USH02 to compromise user credentials—even if…