sap-netweaver-0day-CVE-2025-31324

The SUPERGROUP known as Scattered Lapsus$ Hunters - A combination of groups among ShinyHunters, Scattered Spider, and Lapsus$ have leaked the POC to this 0day This 0day was created by ShinyHunters and stolen from the Chinese state actors in active exploitation. Leaked here:...

CVE-2025-31324-Exploits

This repository does not have a README...

sap_netweaver_cve-2025-31324-

This repository does not have a README...

CVE-2025-31324

Analizador SAP CVE-2025-31324 Un escáner de seguridad basado en Python para identificar la vulnerabilidad CVE-2025-31324 en sistemas SAP Visual Composer, y detectar Indicadores de Compromiso IOCs conocidos como archivos .jsp maliciosos. 🚀 Características Detecta endpoints vulnerables de Visual...

CVE-2025-31324

CVE-2025-31324 此检测方法如何工作？ 该模板向目标的基本 URL 发送 HTTP GET 请求，并检查响应头以识别 SAP NetWeaver Application Server 实例。此信息有助于评估系统是否可能受 CVE-2025-31324 影响。 如何运行此脚本？ 1. 从 此处 下载 Nuclei 2. 将模板复制到你的本地系统 3. 运行以下命令：nuclei -u https://yourHost.com -t template.yaml 参考 https://nvd.nist.gov/vuln/detail/CVE-2025-31324...

jsp-webshell-scanner

JSP Webshell 扫描器：用于 SAP CVE-2025-31324 和 PeopleSoft IOC 分类 一个轻量级脚本，用于扫描 .jsp 和 .jspx 文件中与 JSP 网页后门相关的可疑模式，包括在利用 SAP NetWeaver CVE-2025-31324 的攻击中观察到的模式。 该扫描器还扩展了针对 Oracle PeopleSoft / ShinyHunters / UNC6240 在 CVE-2026-35273 中相关指标的分类检查，包括可疑的 PeopleSoft 路径、文件名、哈希值和 C2 字符串。...

Onapsis-Mandiant-CVE-2025-31324-Vuln-Compromise-Assessment

CVE-2025-31324 零日 SAP 漏洞与失陷评估工具 Onapsis 与 Mandiant 联合发布 Onapsis 与 Mandiant 合作发布了一款开源工具，帮助 SAP 客户识别与 CVE-2025-31324 和 CVE-2025-42999 相关的潜在失陷，这是 SAP NetWeaver Java 系统中的一个严重 0-day 漏洞。 该工具面向可访问潜在受影响环境的系统管理员，用于本地、白盒执行 。它支持漏洞评估、简单失陷评估和工件收集。 功能 该工具目前支持以下功能： 检测系统是否易受 CVE-2025-31324 和 CVE-2025-42999 攻击...

CVE-2025-31324-NUCLEI

CVE-2025-31324-NUCLEI cve-2025-31324 SAP 用のNucleiテンプレート 使用方法: nuclei -u https://victima.com -t cve-2025-31324-validation.yaml 複数のターゲット 使用方法: nuclei -l targets.txt -t cve-2025-31324-validation.yaml...

Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

CVE-2025-31324 A proof of concept developed to exploit CVE-2...

Chinese Hackers Exploit SAP RCE Flaw CVE-2025-31324, Deploy Golang-Based SuperShell

A China-linked unnamed threat actor dubbed Chaya004 has been observed exploiting a recently disclosed security flaw in SAP NetWeaver. Forescout Vedere Labs, in a report published Thursday, said it uncovered a malicious infrastructure likely associated with the hacking group weaponizing...

Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

Info ░█▄█░█▀█░█░█░█░█░█░█░▀█▀░█▀█░█▀█░█▀▄░█░█ ░█░█░█▀▀░█░█░...

Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

CVE-2025-31324 Zero-Day SAP Vulnerability & Compromise Assessm...

Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

CVE-2025-31324-File-Upload A totally unauthenticated file-uplo...

Vulnerabilities fixed in SAP products

SAP has fixed vulnerabilities in several products, including SAP Financial Consolidation, SAP Landscape Transformation, SAP NetWeaver Application Server ABAP, SAP Commerce Cloud, SAP ERP BW, SAP BusinessObjects Business Intelligence Platform, SAP KMC WPC, SAP Solution Manager, SAP S4CORE, and SAP...

Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

CVE-2025-31324 Burp Suite Extension Overview This Python-b...

Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

CVE-2025-31324PoC Proof-of-Concept for CVE-2025-31324: Unauth...

Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

CVE-2025-31324PoC Proof-of-Concept for CVE-2025-31324: Unauth...

Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

SAP-CVE-2025-31324 POC A tool to detect and exploit a critica...

Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

CVE-2025-31324-NUCLEI Nuclei template for...

Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

PoC - CVE-2025-31324 [email protected] Exploit de prueba par...