CVE-2020-6287_RECON-scanner

Vulnerability Assessment and Indicator of Compromise IoC Scanner for CVE-2020-6287 RECON RECON Remotely Exploitable Code On NetWeaver is a critical CVSSv3 10 vulnerability affecting a number of SAP business and technical applications running on top of the SAP NetWeaver Java stack. This...

SAP_RECON

PoC for CVE-2020-6287, CVE-2020-6286 SAP RECON vulnerability Pffff! RECON Remotely Exploitable Code On NetWeaver? Guys, really? That was the best codename you came up with? : This scrip allows to check SAP LM Configuration Wizard missing authorization check vulnerability and as a PoC script...

CVE-2025-0054

CVE-2025-0054 – SAP NetWeaver Stored XSS Scanner 🕷 A lightweight Python tool to detect stored Cross-Site Scripting XSS vulnerabilities in SAP NetWeaver Application Server Java , specifically targeting CVE-2025-0054. ⚠️ For educational and authorized security testing only. Do not use on systems...

CVE-2020-6287-Sap-Add-User

CVE-2020-6287-Sap-Add-User sap netweaver portal add user administrator...

CVE-2025-31324

CVE-2025-31324 A proof of concept developed to exploit CVE-2025-31324. Usage usage: python CVE-2025-31324.py --help SAP NetWeaver Visual Composer Metadata Uploader = 7.50 CVE-2025-31324 PoC positional arguments: FILE local file to upload optional arguments: -h, --help show this help message and...

Burp_CVE-2025-31324

CVE-2025-31324 Burp Suite Extension Overview This Python-based Burp Suite extension is designed to detect the presence of CVE-2025-31324 , a critical vulnerability in SAP NetWeaver Visual Composer’s Metadata Uploader component. The vulnerability allows unauthenticated remote code execution via fi...

SAP NetWeaver Development Infrastructure - Server Side Request Forgery

Server-Side Request Forgery SSRF vulnerability has been detected in the SAP NetWeaver Development Infrastructure Component Build Service versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50The SAP NetWeaver Development Infrastructure Component Build Service allows a threat actor who has access to the...

CVE-2025-31324

🔴 CVE-2025-31324 — SAP NetWeaver Visual Composer Unauthenticated File Upload Type: Proof of Concept — Vulnerability Research CVE: CVE-2025-31324 CVSS: 10.0 Critical AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Status: Patched — SAP Security Note 3594142 + 3604119 Added to CISA KEV: May 2025 ⚠️ This PoC...

CVE-2018-2380

CVE-2018-2380 CVSS v3 Base Score: 6.6/10 PoC of Remote Command Execution via Log injection on SAP NetWeaver AS JAVA CRM Script usage example python crmrce-CVE-2018-2380.py --host 127.0.0.1 --port 50001 --username administrator --password 123QWEasd --SID DM0 --ssl true Where --host is a SAP server...

CVE-2022-22536

CVE-2022-22536 SAP memory pipes desynchronization vulnerabilityMPI CVE-2022-22536. Description - POC for CVE-2022-22536: SAP memory pipesMPI desynchronization vulnerability. - create by antx at 2022-02-15. Detail SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP...

Onapsis_CVE-2025-31324_Scanner_Tools

Vulnerability and Indicator of Compromise IoC Scanner for CVE-2025-31324 Visual Composer Metadata Uploader Vulnerability CVE-2025-31324 is a critical CVSSv3 10 vulnerability affecting SAP NetWeaver systems, specifically within the Visual Composer Metadata Uploader component. This vulnerability...

SAP-memory-pipes-desynchronization-vulnerability-MPI-CVE-2022-22536

SAP-memory-pipes-desynchronization-vulnerability-MPI-CVE-2022-22536 What is the vulnerability about? SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for request smuggling and request...

CVE-2020-6287

CVE-2020-6287 SAP NetWeaver AS JAVA LM Configuration Wizard Authentication Bypass Create Simple & Administrator Java User SAP NetWeaver is SAP’s integrated technology platform and the technical foundation of all SAP applications since SAP Business Suite. SAP NetWeaver is a service-oriented...

CVE-2020-6287_SAP-NetWeaver-bypass-auth

CVE-2020-6287SAP-NetWeaver-bypass-auth Automated Exploit for CVE-2020-6287 CVE-2020-6287: SAP NetWeaver AS JAVA LM Configuration Wizard, versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an attacker without prior authentication to execute configuration tasks...

sap-netweaver-0day-CVE-2025-31324

The SUPERGROUP known as Scattered Lapsus$ Hunters - A combination of groups among ShinyHunters, Scattered Spider, and Lapsus$ have leaked the POC to this 0day This 0day was created by ShinyHunters and stolen from the Chinese state actors in active exploitation. Leaked here:...

CVE-2025-31324

CVE-2025-31324 How does this detection method work? The template performs an HTTP GET request to the target's base URL and examines the response headers to identify SAP NetWeaver Application Server instances. This information helps assess whether the system might be susceptible to CVE-2025-31324...

jsp-webshell-scanner

JSP Webshell Scanner for SAP CVE-2025-31324 and PeopleSoft IOC Triage A lightweight script to scan .jsp and .jspx files for suspicious patterns typically associated with JSP-based webshells, including those observed in attacks exploiting SAP NetWeaver CVE-2025-31324. This scanner has also been...

SAP Memory Pipes (MPI) Desynchronization

SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable to request smuggling and request concatenation attacks. An unauthenticated attacker can prepend a victim's request with arbitrary data. This...

SAP NetWeaver AS JAVA 7.30-7.50 - Remote Admin Addition

SAP NetWeaver AS JAVA LM Configuration Wizard, versions 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an attacker without prior authentication to execute configuration tasks to perform critical actions against the SAP Java system, including the ability to create an...

CVE-2025-31324

CVE-2025-31324 Proof-of-Concept 0day for SAP NetWeaver created by ShinyHunters CVE-2025-31324 is a critical "Unrestricted File Upload" vulnerability affecting the SAP NetWeaver Application Server AS Java. Specifically, it resides within the Visual Composer component VCFRAMEWORK. The flaw allows a...