SAP NetWeaver ConfigServlet RCE

Exploits unauthenticated command execution via EXECUTECMD on /ctc/servlet/ConfigServlet/. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """SAP NetWeaver ConfigServlet EXECUTECMD RCE — execute session.""" from future import annotations import re from urllib.parse...

SAP NetWeaver Portal - ConfigServlet RCE Detection

Detects SAP ConfigServlet command execution via EXECUTECMD;CMDLINE=id on /ctc/servlet/ConfigServlet/. !/usr/bin/env python3 -- coding: utf-8 -- """SAP NetWeaver Portal ConfigServlet RCE.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...