CVE-2025-31324

CVE-2025-31324 Una prueba de concepto desarrollada para explotar CVE-2025-31324. Uso root@kitploit: usage: python CVE-2025-31324.py --help SAP NetWeaver Visual Composer Metadata Uploader = 7.50 CVE-2025-31324 PoC positional arguments: FILE local file to upload optional arguments: -h, --help show...

SAP_RECON

PoC for CVE-2020-6287, CVE-2020-6286 SAP RECON vulnerability Pffff! RECON Remotely Exploitable Code On NetWeaver? Guys, really? That was the best codename you came up with? : This scrip allows to check SAP LM Configuration Wizard missing authorization check vulnerability and as a PoC script...

CVE-2022-22536_SAP_Request_Smuggling_Scanner

CVE-2022-22536 Escáner de Contrabando de Solicitudes SAP Este es un escáner rápido por lotes a nivel de socket para CVE-2022-22536 , una vulnerabilidad crítica de contrabando de solicitudes en SAP Internet Communication Manager ICM y SAP Web Dispatcher. Prueba múltiples hosts en paralelo para...

CVE-2021-33690

CVE-2021-33690 CVE-2021-33690 Vulnerabilidad de Server Side Request Forgery en SAP NetWeaver Development Infrastructure root@kitploit: Application: SAP NetWeaver AS Java Versions Affected: SAP NetWeaver Development Infrastructure Component Build Service versions – 7.11, 7.20, 7.30, 7.31, 7.40, 7....

powersap

PowerSAP PowerSAP is a simple powershell re-implementation of popular & effective techniques of all public tools such as Bizploit, Metasploit auxiliary modules, or python scripts available on the Internet. This re-implementation does not contain any new or undisclosed vulnerability. PowerSAP allo...

powersap

PowerSAP PowerSAP 是对所有公开工具中流行且有效的技术（如 Bizploit、Metasploit 辅助模块或互联网上可用的 Python 脚本）的简单 PowerShell 重新实现。此重新实现不包含任何新的或未公开的漏洞。 PowerSAP 允许通过 .Net 连接器 'NCo' 访问 SAP RFC。 致谢 所有功劳归于： Onapsis - Mariano, Jordan… ERPScan @chipik ERPSEC - Joris van De Vis @jvis Chris John Riley @ChrisJohnRiley Agnivesh...

CVE-2017-12637_SAP-NetWeaver-URL-Traversal

CVE-2017-12637SAP-NetWeaver-URL-Traversal Proof-of-concept LFI Scanner: Automated detection of /etc/passwd exposures via directory traversal and regex matching. root@kitploit: LFI Scanner A lightweight Python proof-of-concept to scan target hosts for Local File Inclusion LFI vulnerabilities by...

CVE-2021-21337

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:40+00:00| seen| https://t.me/hackingAttack/11108 2026-09-02 01:03:17+00:00| seen| https://t.me/hackingAttack/11108...

pysap

pysap - Biblioteca Python para crear paquetes de protocolos de red de SAP Versión 0.2.1.dev0 en desarrollo Resumen SAP Netweaver y SAP HANA son plataformas tecnológicas para construir e integrar aplicaciones empresariales de SAP. La comunicación entre componentes utiliza diferentes protocolos de...

nuclei-template-cve-2025-31324-check

SAP CVE-2025-31324 Check Overview This template is designed to check the presence of the SAP NetWeaver CVE-2025-31324 vulnerability. This vulnerability allows unauthorized users to upload JSP files through the /developmentserver/metadatauploader endpoint, which can lead to potential remote code...

CVE-2020-6287

CVE-2020-6287 SAP NetWeaver AS JAVA LM Configuration Wizard Authentication Bypass Create Simple & Administrator Java User SAP NetWeaver is SAP’s integrated technology platform and the technical foundation of all SAP applications since SAP Business Suite. SAP NetWeaver is a service-oriented...

CVE-2016-4014

CVE-2016-4014 SAP Netweaver JAVA AS UDDI Component XXE root@kitploit: POST /uddi/api/replication HTTP/1.1 Host: host Connection: close Accept-Encoding: gzip, deflate Accept: / User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:78.0 Gecko/20100101 Firefox/78.0 Content-Type:...

macOS-enterprise-privileges

Privileges Gestión de derechos de administrador transparente, gratuita y segura para macOS. Privileges es una aplicación gratuita para macOS diseñada para entornos empresariales modernos. Ofrece a los usuarios privilegios de administrador temporales cuando los necesitan, sin otorgar derechos de...

CVE-2025-31324

Proof of Concept - CVE-2025-31324 [email protected] Proof of concept exploit for vulnerability CVE-2025-31324 in SAP NetWeaver Visual Composer , which allows arbitrary file upload without authentication via the /developmentserver/metadatauploader endpoint. ⚠️ This code is for educational...

CVE-2025-31324-NUCLEI

CVE-2025-31324-NUCLEI Nuclei template for cve-2025-31324 SAP Usage: nuclei -u https://victima.com -t cve-2025-31324-validation.yaml Múltiples objetivos Usage: nuclei -l targets.txt -t cve-2025-31324-validation.yaml...

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

sap-netweaver-0day-CVE-2025-31324

The SUPERGROUP known as Scattered Lapsus$ Hunters - A combination of groups among ShinyHunters, Scattered Spider, and Lapsus$ have leaked the POC to this 0day This 0day was created by ShinyHunters and stolen from the Chinese state actors in active exploitation. Leaked here:...

CVE-2020-6308-PoC

CVE-2020-6308 SAP POC SAP BusinessObjects Business Intelligence Platform Web Services versions - 410, 420, 430, allows an unauthenticated attacker to inject arbitrary values as CMS parameters to perform lookups on the internal network which is otherwise not accessible externally. Follow me on...

SAP Solution Manager - Open Redirect

SAP Solution Manager contains an open redirect vulnerability via the logoff endpoint. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2020-26836 info: name: SAP Solution Manager - Open...

SAP Knowledge Warehouse <=7.5.0 - Cross-Site Scripting

SAP Knowledge Warehouse 7.30, 7.31, 7.40, and 7.50 contain a reflected cross-site scripting vulnerability via the usage of one SAP KW component within a web browser. id: CVE-2021-42063 info: name: SAP Knowledge Warehouse =7.5.1 to mitigate the XSS vulnerability. reference: -...