SAP Memory Pipes (MPI) Desynchronization

SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable to request smuggling and request concatenation attacks. An unauthenticated attacker can prepend a victim's request with arbitrary data. This...

CVE-2025-31324_PoC_SAP

CVE-2025-31324PoC Proof-of-Concept for CVE-2025-31324: Unauthenticated upload in SAP NetWeaver Visual Composer Metadata Uploader This script performs: 1. File upload to the vulnerable endpoint via Upload host/port 2. Optional trigger via HTTP GET via Trigger host/port 3. Basic response...

CVE-2016-4014

CVE-2016-4014 SAP Netweaver JAVA AS UDDI 组件 XXE POST /uddi/api/replication HTTP/1.1 Host: host Connection: close Accept-Encoding: gzip, deflate Accept: / User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:78.0 Gecko/20100101 Firefox/78.0 Content-Type: text/xml;charset=UTF-8 SOAPAction:...

CVE-2021-38163

CVE-2021-38163 CVE-2021-38163 - SAP Netveawer 漏洞利用 SAP NetWeaver Visual Composer 7.0 RT 版本 - 7.30, 7.31, 7.40, 7.50，在没有限制的情况下，经认证的非管理用户可以通过网络上传恶意文件并触发其处理，从而能够以 Java 服务器进程的权限运行操作系统命令。这些命令可用于读取或修改服务器上的任何信息，或关闭服务器使其不可用。...

CVE-2022-22536

CVE-2022-22536 SAP memory pipes desynchronization vulnerabilityMPI CVE-2022-22536. Description - POC for CVE-2022-22536: SAP memory pipesMPI desynchronization vulnerability. - create by antx at 2022-02-15. Detail SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP...

CVE-2025-31324

CVE-2025-31324 ¿Cómo funciona este método de detección? La plantilla realiza una solicitud HTTP GET a la URL base del objetivo y examina las cabeceras de respuesta para identificar instancias de SAP NetWeaver Application Server. Esta información ayuda a evaluar si el sistema podría ser susceptibl...

sap-netweaver-0day-CVE-2025-31324

The SUPERGROUP known as Scattered Lapsus$ Hunters - A combination of groups among ShinyHunters, Scattered Spider, and Lapsus$ have leaked the POC to this 0day This 0day was created by ShinyHunters and stolen from the Chinese state actors in active exploitation. Leaked here:...

SAP_RECON

CVE-2020-6287、CVE-2020-6286 的 PoC（SAP RECON 漏洞） Pffff！RECON（远程可利用 NetWeaver 代码）？伙计们，真的吗？这就是你们想出的最佳代号？: 此脚本用于检测 SAP LM Configuration Wizard 缺少授权检查的漏洞，并作为 PoC 脚本利用 queryProtocol 方法中的目录遍历。 目录遍历允许从 SAP 服务器下载任意 zip 文件。 本项目仅用于教育目的，不能用于违法或个人牟利。 项目作者不对因本项目材料造成的任何可能损害负责。 原始发现： CVE-2020-6287：Pablo Artuso...

CVE-2018-2380

CVE-2018-2380 Puntuación base CVSS v3: 6.6/10 PoC de ejecución remota de comandos mediante inyección de logs en SAP NetWeaver AS JAVA CRM Ejemplo de uso del script python crmrce-CVE-2018-2380.py --host 127.0.0.1 --port 50001 --username administrator --password 123QWEasd --SID DM0 --ssl true Dónde...

CVE-2017-12637_SAP-NetWeaver-URL-Traversal

CVE-2017-12637SAP-NetWeaver-URL-Traversal Proof-of-concept LFI Scanner: Automated detection of /etc/passwd exposures via directory traversal and regex matching. LFI Scanner A lightweight Python proof-of-concept to scan target hosts for Local File Inclusion LFI vulnerabilities by attempting to...

SAP-brute

SAP-brute Bruteforcer de inicio de sesión de SAP Netweaver. usage: SAP-brute.py -h -u URL -f FILE -p PROXY optional arguments: -h, --help show this help message and exit -u URL, --url URL URL to test -f FILE, --file FILE File of urls -p PROXY, --proxy PROXY Proxy for debugging Sitio único python3...

CVE-2020-6287_RECON-scanner

Escáner de Evaluación de Vulnerabilidades e Indicadores de Compromiso IoC para CVE-2020-6287 RECON RECON Remotely Exploitable Code On NetWeaver es una vulnerabilidad crítica CVSSv3 10 que afecta a varias aplicaciones técnicas y de negocio de SAP que se ejecutan sobre la pila Java de SAP NetWeaver...

SAP-memory-pipes-desynchronization-vulnerability-MPI-CVE-2022-22536

SAP-memory-pipes-desynchronization-vulnerability-MPI-CVE-2022-22536 ¿De qué trata la vulnerabilidad? SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 y SAP Web Dispatcher son vulnerables a request smuggling y a la concatenación d...

CVE-2016-2386

CVE-2016-2386 SAP NetWeaver AS JAVA - Inyección SQL en el componente UDDI POST /UDDISecurityService/UDDISecurityImplBean HTTP/1.1 Host: host Connection: close Accept-Encoding: gzip, deflate Accept: / User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:78.0 Gecko/20100101 Firefox/78.0...

sap_netweaver_cve-2025-31324-

Este repositorio no tiene un README...

CVE-2025-31324_PoC

CVE-2025-31324PoC 针对CVE-2025-31324的利用验证：SAP NetWeaver Visual Composer元数据上传器中的未授权上传 该脚本执行： 1. 向存在漏洞的端点上传文件（通过上传主机/端口） 2. 可选地通过HTTP GET触发（通过触发主机/端口） 3. 基本响应验证/日志记录 使用示例： python3 PoC.py --host sap.example.com --port 50000 --endpoint /irj/portal/sap/bc/webdynpro/sap/ZWDCMETADATAUPLDR --file...

CVE-2020-6286

CVE-2020-6286 SAP NetWeaver AS JAVA LM Configuration Wizard Directory Traversal SAP NetWeaver is SAP’s integrated technology platform and the technical foundation of all SAP applications since SAP Business Suite. SAP NetWeaver is a service-oriented application and integration platform that provid...

CVE-2025-31324

信息 ░█▄█░█▀█░█░█░█░█░█░█░▀█▀░█▀█░█▀█░█▀▄░█░█ ░█░█░█▀▀░█░█░█░█░█▄█░░█░░█░█░█░█░█▀▄░░█░ ░▀░▀░▀░░░▀▀▀░▀▀▀░▀░▀░▀▀▀░▀░▀░▀░▀░▀░▀░░▀░ N U L L T R A C E // NullTrace :: 无日志。无噪音。只有信号。 // ----- 签名 ----- 密钥: ssh-rsa AAAAB3...NullKey...KFA== 指纹: 88:11:00:BE:HM:00:82:NULL:TR:ACE 座右铭: "隐私不是犯罪。沉默是武器。" 🛡️ SAP漏洞公开...

jsp-webshell-scanner

Escáner de Webshell JSP para SAP CVE-2025-31324 y Triage de IOC de PeopleSoft Un script ligero para escanear archivos .jsp y .jspx en busca de patrones sospechosos típicamente asociados con webshells basadas en JSP, incluyendo aquellos observados en ataques que explotan SAP NetWeaver...

SAP NetWeaver Development Infrastructure - Server Side Request Forgery

Server-Side Request Forgery SSRF vulnerability has been detected in the SAP NetWeaver Development Infrastructure Component Build Service versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50The SAP NetWeaver Development Infrastructure Component Build Service allows a threat actor who has access to the...