June 2015

PeopleTools Mobile Book

Jim Marion is releasing a new book on writing mobile applications with PeopleTools. Fluid and MAP have been out for about a year. If you guessed that a new PeopleTools mobile book would cover these mobile technologies, you guessed correctly. But I saw no reason to stop there. After describing… Read More »PeopleTools Mobile Book

PSEatCookies

From Kyle Benson: a servlet filter to remove PS_TOKEN from the response cookie: One option is to simply disable the PS_TOKEN, and therefore prevent this vulnerability altogether! The problem is, PeopleSoft does not give us the option to disable it. I decided to come up with a proof of concept… Read More »PSEatCookies

TraceMagic

TraceMagic is a utility that gives PeopleSoft system administrators, programmers and support engineers the ability to quickly isolate performance bottlenecks in SQL Statements and/or PeopleCode functions. It accomplishes this by turning the text-based, time-ordered tracesql file into a sortable-grid display, allowing the user to quickly locate system performance issues. TraceMagic… Read More »TraceMagic

Limit PeopleSoft Vulnerabilities

Last week a presentation at Hack in the Box, “Oracle PeopleSoft Applications are Under Attack”, focused on vulnerabilities in PeopleSoft applications. The presentation showed a number of ways that hackers could get access to a system. While some of the issues need to be fixed by Oracle (like poor encryption),… Read More »Limit PeopleSoft Vulnerabilities