CVE-2021-38163

CVE-2021-38163 CVE-2021-38163 - exploit para SAP Netveawer SAP NetWeaver Visual Composer 7.0 RT versions - 7.30, 7.31, 7.40, 7.50, sin restricción, un atacante autenticado como usuario no administrativo puede cargar un archivo malicioso a través de una red y desencadenar su procesamiento, el cual...

SAP-brute

SAP-brute SAP Netweaver 登录暴力破解器。 root@kitploit: usage: SAP-brute.py -h -u URL -f FILE -p PROXY optional arguments: -h, --help show this help message and exit -u URL, --url URL URL to test -f FILE, --file FILE File of urls -p PROXY, --proxy PROXY Proxy for debugging 单个站点 root@kitploit: python3...

CVE-2020-6287_RECON-scanner

用于 CVE-2020-6287 RECON 的漏洞评估与失陷指标 IoC 扫描器 RECON（NetWeaver 上的远程可利用代码，Remotely Exploitable Code On NetWeaver）是一个严重影响众多基于 SAP NetWeaver Java 技术栈运行的 SAP 业务和技术应用程序的关键（CVSSv3 10）漏洞。该漏洞由 Onapsis 研究实验室发现，并与 SAP 密切合作，于 2020 年 7 月 14 日开发并发布了补丁。鉴于该问题的严重性，美国 DHS CISA、BSI CERT-Bund 以及其他多个政府机构发布了警报，敦促 SAP...

sap_netweaver_cve-2025-31324-

此存储库没有 README。...

sap-netweaver-0day-CVE-2025-31324

El SUPERGRUPO conocido como Scattered Lapsus$ Hunters - Una combinación de grupos entre ShinyHunters, Scattered Spider y Lapsus$ han filtrado el POC de este 0day Este 0day fue creado por ShinyHunters y robado de actores estatales chinos en explotación activa. Filtrado aquí:...

CVE-2025-31324

정보 ░█▄█░█▀█░█░█░█░█░█░█░▀█▀░█▀█░█▀█░█▀▄░█░█ ░█░█░█▀▀░█░█░█░█░█▄█░░█░░█░█░█░█░█▀▄░░█░ ░▀░▀░▀░░░▀▀▀░▀▀▀░▀░▀░▀▀▀░▀░▀░▀░▀░▀░▀░░▀░ N U L L T R A C E // NullTrace :: 로그 없음. 노이즈 없음. 오직 신호만. // ----- 서명----- 키: ssh-rsa AAAAB3...NullKey...KFA== 지문: 88:11:00:BE:HM:00:82:NULL:TR:ACE 좌우명: "프라이버시는 범죄가 아니다. 침묵...

CVE-2020-6287

CVE-2020-6287 SAP NetWeaver AS JAVA LM 配置向导 认证绕过（创建简单 & 管理员 Java 用户） SAP NetWeaver 是 SAP 的集成技术平台，也是自 SAP Business Suite 以来所有 SAP 应用的技术基础。SAP NetWeaver 是一个面向服务的应用和集成平台，为 SAP 应用提供开发和运行环境，也可用于自定义开发以及与其他应用和系统的集成。SAP NetWeaver AS JAVA LM 配置向导，版本 7.30, 7.31, 7.40, 7.50，未执行认证检查，使得未事先认证的攻击者能够执行配置任务，对 SAP...

CVE-2025-31324

CVE-2025-31324 这是一个为利用 CVE-2025-31324 而开发的概念验证代码。 用法 root@kitploit: usage: python CVE-2025-31324.py --help SAP NetWeaver Visual Composer Metadata Uploader = 7.50 CVE-2025-31324 PoC positional arguments: FILE local file to upload optional arguments: -h, --help show this help message and exit --htt...

CVE-2025-31324

CVE-2025-31324 Como funciona este método de deteção? O template realiza uma requisição HTTP GET à URL base do alvo e examina os cabeçalhos de resposta para identificar instâncias do SAP NetWeaver Application Server. Esta informação ajuda a avaliar se o sistema pode ser suscetível ao CVE-2025-3132...

SAP-memory-pipes-desynchronization-vulnerability-MPI-CVE-2022-22536

SAP-memory-pipes-desynchronization-vulnerability-MPI-CVE-2022-22536 이 취약점은 무엇에 관한 것인가? SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 및 SAP Web Dispatcher는 요청 스머글링request smuggling과 요청 연결request concatenation에 취약합니다. 인증되지 않은 공격...

CVE-2016-4014

CVE-2016-4014 SAP Netweaver JAVA AS UDDI 구성 요소 XXE root@kitploit: POST /uddi/api/replication HTTP/1.1 Host: host Connection: close Accept-Encoding: gzip, deflate Accept: / User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:78.0 Gecko/20100101 Firefox/78.0 Content-Type:...

CVE-2020-6286

CVE-2020-6286 SAP NetWeaver AS JAVA LM Configuration Wizard - Traversée de répertoire SAP NetWeaver est la plateforme technologique intégrée de SAP et le fondement technique de toutes les applications SAP depuis SAP Business Suite. SAP NetWeaver est une plateforme applicative et d'intégration...

CVE-2018-2380

CVE-2018-2380 CVSS v3 Base Score: 6.6/10 PoC of Remote Command Execution via Log injection on SAP NetWeaver AS JAVA CRM Script usage example root@kitploit: python crmrce-CVE-2018-2380.py --host 127.0.0.1 --port 50001 --username administrator --password 123QWEasd --SID DM0 --ssl true Where --host...

CVE-2022-22536

CVE-2022-22536 Vulnerabilidad de desincronización de memory pipes MPI de SAP CVE-2022-22536. Descripción - POC para CVE-2022-22536: Vulnerabilidad de desincronización de memory pipes MPI de SAP. - Creado por antx el 2022-02-15. Detalle SAP NetWeaver Application Server ABAP, SAP NetWeaver...

CVE-2025-42944

CVE-2025-42944 SAP NetWeaver의 역직렬화 취약점으로 인해, 인증되지 않은 공격자가 RMI-P4 모듈을 통해 열린 포트에 악성 페이로드를 전송하여 시스템을 공격할 수 있습니다. 이러한 신뢰할 수 없는 Java 객체의 역직렬화는 임의의 OS 명령 실행으로 이어질 수 있으며, 애플리케이션의 기밀성, 무결성 및 가용성에 높은 영향을 미칩니다. 이 탐지 방법은 어떻게 작동하나요? 이 탐지 방법은 GET 요청을 전송하여 서버 헤더를 통해 SAP NetWeaver Application Server 인스턴스를 식별하고,...

CVE-2016-2386

CVE-2016-2386 SAP NetWeaver AS JAVA UDDI 컴포넌트 SQL 인젝션 root@kitploit: POST /UDDISecurityService/UDDISecurityImplBean HTTP/1.1 Host: host Connection: close Accept-Encoding: gzip, deflate Accept: / User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:78.0 Gecko/20100101 Firefox/78.0...

Onapsis_CVE-2025-31324_Scanner_Tools

Scanner per vulnerabilità e indicatore di compromissione IoC per CVE-2025-31324 Vulnerabilità di Visual Composer Metadata Uploader CVE-2025-31324 è una vulnerabilità critica CVSSv3 10 che colpisce i sistemi SAP NetWeaver, in particolare il componente Visual Composer Metadata Uploader. Questa...

CVE-2020-6287-Sap-Add-User

CVE-2020-6287-Sap-Add-User добавление пользователя-администратора в портал SAP NetWeaver...

SAP_RECON

PoC para CVE-2020-6287, CVE-2020-6286 vulnerabilidade SAP RECON Pffff! RECON Remotely Exploitable Code On NetWeaver? Caras, a sério? Foi o melhor nome que arranjaram? : Este script permite verificar a vulnerabilidade de falta de verificação de autorização no SAP LM Configuration Wizard e, como Po...

CVE-2021-33690

CVE-2021-33690 CVE-2021-33690 SAP NetWeaver Development Infrastructure의 서버 측 요청 위조SSRF 취약점 root@kitploit: Application: SAP NetWeaver AS Java Versions Affected: SAP NetWeaver Development Infrastructure Component Build Service versions – 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 Vendor URL: https://sap.co...