Unlocking the Secrets of the FileMaker Server Keystore: A Cryptographic Exploration Source: https://davidhamann.de/2023/05/29/deciphering-the-filemaker-keystore/ Introduction On This Page While checking out how the FileMaker Pro to Server upload feature worked, I noticed that credentials were encrypted using a RSA public key before being sent to the server. I looked into FileMaker Server’s installation directory and found that
A Deep Dive into FileMaker Security and Cyber Threats André Just Vedgren, EngageU 2022 In today’s rapidly evolving digital landscape, cybersecurity is a top priority for businesses of all sizes. Whether you’re managing a small business or overseeing a large organization, the risks associated with data breaches, ransomware, and cyber espionage are increasing. This comprehensive
Heidi Porter, Chris Moyer, EngageU 2022 Table of Contents Introduction: Background and Importance To top Heidi Porter and Chris Moyer, seasoned experts in FileMaker security, presented on the topic of ransomware protection at EngageU 2022. Both Porter and Moyer have extensive experience in the FileMaker ecosystem and are dedicated to educating users on best practices
Heidi Porter, Chris Moyer, EngageU 2022 Table of Contents Introduction: Understanding the Cyber Threat Landscape Heidi Porter and Chris Moyer emphasize the critical need for organizations and individuals to understand the evolving cybersecurity landscape. Over the past decade, attacks have become more sophisticated, targeting personal devices, organizational networks, and even public infrastructure. As more services
Uncovering XXE Vulnerabilities in FileMaker’s XML Parsing Source: https://davidhamann.de/2021/11/18/filemaker-xxe-vulnerability/ CVE FileMaker Pro CVE-2021-44147 A couple of months ago I looked more deeply into the “Import Records” functionality in FileMaker, especially the XML parsing, and was wondering if any XXE vulnerability may exist and how one could exploit this in technically interesting ways. The vulnerability is/was indeed there