Skip to content

Blog

PSEatCookies

From Kyle Benson: a servlet filter to remove PS_TOKEN from the response cookie: One option is to simply disable the PS_TOKEN, and therefore prevent this vulnerability altogether! The problem is, PeopleSoft does not give us the option to disable it. I decided to come up with a proof of concept for a custom solution to... Continue reading

TraceMagic

TraceMagic is a utility that gives PeopleSoft system administrators, programmers and support engineers the ability to quickly isolate performance bottlenecks in SQL Statements and/or PeopleCode functions. It accomplishes this by turning the text-based, time-ordered tracesql file into a sortable-grid display, allowing the user to quickly locate system performance issues. TraceMagic is a great tool for... Continue reading

Limit PeopleSoft Vulnerabilities

Last week a presentation at Hack in the Box, “Oracle PeopleSoft Applications are Under Attack”, focused on vulnerabilities in PeopleSoft applications. The presentation showed a number of ways that hackers could get access to a system. While some of the issues need to be fixed by Oracle (like poor encryption), there are a number of... Continue reading

Podcast

#337 – ACM and Load Balancers

This week on the podcast, Kyle and Dan discuss securing your public user and leaking information, how to speed up change assistant upgrade projects, and new ACM plugins to work with Load Balanced gateways. The PeopleSoft Administrator Podcast hosted by Dan Iverson and Kyle Benson. Show Notes psadmin.conf @ 1:00 Public Web Profile and Security...

#336 – 8.60 Themes and How we use the DPK

This week on the podcast, Kyle and Dan talk about the new psadmin.io Themes for 8.60, and then they discuss how they are currently using the DPK to build new environments and what has changed in the DPK since it was released. The PeopleSoft Administrator Podcast hosted by Dan Iverson and Kyle Benson. Show Notes...

#335 – io_homes DPK Module

This week on the podcast, Kyle and Dan talk about the changes to the 8.60 database upgrade and the new PPTLS860 project. Dan also shares some updates to the IO_STYLE_859 project and discusses his new io_homes DPK module. The PeopleSoft Administrator Podcast hosted by Dan Iverson and Kyle Benson. Show Notes psadmin.conf 2023 – May...

#333 – Opensearch and PeopleTools 8.60 w/ Sasank Vemana

This week on the podcast, PeopleTools Strategy Director Sasank Vemana joins us to talk about the upcoming switch to Opensearch, Configurable Search, Redwood UI, and some of his favorite features in PeopleTools 8.60. The PeopleSoft Administrator Podcast hosted by Dan Iverson and Kyle Benson Show Notes Redwood UX for PeopleSoft @ 3:15 Redwood UI Introduction...