Lucene search
+L

17875 matches found

Kitploit
Kitploit
added 2026/09/21 10:31 p.m.12 views

SAPKiln

OWASP SAPKiln The world 🌎 of SAP is very vast and unique. SAP has multiple products to tackle various problems as well as multiple technology platforms such as NetWeaver etc. SAPKiln is an open-source GUI tool 💻 designed to empower security researchers in conducting efficient auditing and...

6.1AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/21 10:22 p.m.10 views

cve-2013-3319

cve-2013-3319 metasploit module for CVE-2013-3319 / SAP Security Note 1816536 obsolete : use saphostctrlgetcomputersystem from metasploit. This is kept for historical purposes only. Full advisory: http://labs.integrity.pt/advisories/cve-2013-3319/...

5CVSS5.8AI score0.20346EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/21 10:04 p.m.11 views

CVE-2022-22536

CVE-2022-22536 Vulnerabilidad de desincronización de memory pipes MPI de SAP CVE-2022-22536. Descripción - POC para CVE-2022-22536: Vulnerabilidad de desincronización de memory pipes MPI de SAP. - Creado por antx el 2022-02-15. Detalle SAP NetWeaver Application Server ABAP, SAP NetWeaver...

10CVSS8.4AI score0.97945EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/21 9:01 p.m.10 views

sap-netweaver-0day-CVE-2025-31324

El SUPERGRUPO conocido como Scattered Lapsus$ Hunters - Una combinación de grupos entre ShinyHunters, Scattered Spider y Lapsus$ han filtrado el POC de este 0day Este 0day fue creado por ShinyHunters y robado de actores estatales chinos en explotación activa. Filtrado aquí:...

10CVSS8.1AI score0.9947EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/21 7:38 p.m.7 views

CVE-2020-6287_RECON-scanner

Escáner de Evaluación de Vulnerabilidades e Indicadores de Compromiso IoC para CVE-2020-6287 RECON RECON Remotely Exploitable Code On NetWeaver es una vulnerabilidad crítica CVSSv3 10 que afecta a varias aplicaciones técnicas y de negocio de SAP que se ejecutan sobre la pila Java de SAP NetWeaver...

10CVSS8.6AI score0.94719EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/21 6:48 p.m.26 views

pysap

pysap - Python library for crafting SAP's network protocols packets Version 0.2.1 Overview SAP Netweaver and SAP HANA are technology platforms for building and integrating SAP business applications. Communication between components uses different network protocols and some services and tools make...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/21 6:40 p.m.12 views

SAP-memory-pipes-desynchronization-vulnerability-MPI-CVE-2022-22536

SAP-memory-pipes-desynchronization-vulnerability-MPI-CVE-2022-22536 ¿De qué trata la vulnerabilidad? SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 y SAP Web Dispatcher son vulnerables a request smuggling y a la concatenación d...

10CVSS8.5AI score0.97945EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/21 6:37 p.m.13 views

RFCpwn

RFCpwn 一个使用 SAP RFC 调用的 SAP 枚举与利用工具包 Twitter: @icryo 这是一个用于展示受损服务账户影响的工具包。 此 PoC 不适用于生产环境,不保证稳定性或支持。 RFCpwn 依赖于 pyrfc 以及 SAP 提供的库,详情请参见:https://github.com/SAP/PyRFCinstallation root@kitploit: usage: RFCpwn.py -h -debug -ip IP -u Username -p Password -c Client -s Sysid -ping -enum -usercopy -user...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/21 6:29 p.m.117 views

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/21 6:20 p.m.14 views

sncscan

sncscan 用于分析SAP安全网络通信(SNC)的工具。 如何使用? 在当前状态下,sncscan 可用于读取 SAP Router 和 DIAG(SAP GUI)连接的 SNC 配置。SAP RFC 协议的实现目前正在开发中。 SAP Router SAP Router 可以支持或不支持 SNC,但无法对 SNC 参数进行更细粒度的配置。尽管如此,sncscan 可以检测它是否已激活: root@kitploit: sncscan -H 10.3.161.4 -S 3299 -p router DIAG / SAP GUI DIAG 连接(由 SAP GUI 使用)的 SNC 配置...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/21 5:50 p.m.7 views

CVE-2016-2386

CVE-2016-2386 SAP NetWeaver AS JAVA - Inyección SQL en el componente UDDI root@kitploit: POST /UDDISecurityService/UDDISecurityImplBean HTTP/1.1 Host: host Connection: close Accept-Encoding: gzip, deflate Accept: / User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:78.0 Gecko/20100101...

9.8CVSS7.1AI score0.71522EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/21 3:28 p.m.11 views

sap_netweaver_cve-2025-31324-

This repository does not have a README...

10CVSS8.2AI score0.9947EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/21 3:10 p.m.12 views

CVE-2020-6308

CVE-2020-6308 Exploit script for SAP Business Objects SSRF This is a simple Golang script to automate the exploitation of CVE-2020-6308. The original Github repo did not show any automation https://github.com/InitRoot/CVE-2020-6308-PoC , thanks @InitRoot, so this was made in an effort to help...

5.3CVSS6.7AI score0.61736EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/21 2:12 p.m.11 views

CVE-2025-31324_PoC

CVE-2025-31324PoC 针对CVE-2025-31324的利用验证:SAP NetWeaver Visual Composer元数据上传器中的未授权上传 该脚本执行: 1. 向存在漏洞的端点上传文件(通过上传主机/端口) 2. 可选地通过HTTP GET触发(通过触发主机/端口) 3. 基本响应验证/日志记录 使用示例: python3 PoC.py --host sap.example.com --port 50000 --endpoint /irj/portal/sap/bc/webdynpro/sap/ZWDCMETADATAUPLDR --file...

10CVSS8.3AI score0.9947EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/21 2:07 p.m.9 views

SAP-brute

SAP-brute Bruteforcer de inicio de sesión de SAP Netweaver. root@kitploit: usage: SAP-brute.py -h -u URL -f FILE -p PROXY optional arguments: -h, --help show this help message and exit -u URL, --url URL URL to test -f FILE, --file FILE File of urls -p PROXY, --proxy PROXY Proxy for debugging Siti...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/21 2:00 p.m.8 views

CVE-2020-6286

CVE-2020-6286 SAP NetWeaver AS JAVA LM Configuration Wizard Directory Traversal SAP NetWeaver es la plataforma tecnológica integrada de SAP y la base técnica de todas las aplicaciones SAP desde SAP Business Suite. SAP NetWeaver es una plataforma de aplicación e integración orientada a servicios q...

5.3CVSS6.6AI score0.28312EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/21 1:47 p.m.11 views

CVE-2020-6287_SAP-NetWeaver-bypass-auth

CVE-2020-6287SAP-NetWeaver-bypass-auth Exploit automatizado para CVE-2020-6287 CVE-2020-6287: SAP NetWeaver AS JAVA LM Configuration Wizard, versiones - 7.30, 7.31, 7.40, 7.50, no realiza una comprobación de autenticación, lo que permite que un atacante sin autenticación previa ejecute tareas de...

10CVSS8.7AI score0.94719EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/21 1:45 p.m.7 views

CVE-2025-31324

Información ░█▄█░█▀█░█░█░█░█░█░█░▀█▀░█▀█░█▀█░█▀▄░█░█ ░█░█░█▀▀░█░█░█░█░█▄█░░█░░█░█░█░█░█▀▄░░█░ ░▀░▀░▀░░░▀▀▀░▀▀▀░▀░▀░▀▀▀░▀░▀░▀░▀░▀░▀░░▀░ N U L L T R A C E // NullTrace :: Sin registros. Sin ruido. Solo señal. // ----- FIRMA ----- Clave: ssh-rsa AAAAB3...NullKey...KFA== Huella:...

10CVSS8.2AI score0.9947EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/21 1:09 p.m.15 views

CVE-2017-12637_SAP-NetWeaver-URL-Traversal

CVE-2017-12637SAP-NetWeaver-URL-Traversal LFI Scanner de prueba de concepto: detección automatizada de exposiciones de /etc/passwd mediante directory traversal y coincidencia de regex. root@kitploit: LFI Scanner Una prueba de concepto ligera en Python para escanear hosts objetivo en busca de...

7.5CVSS8.5AI score0.95111EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/21 12:45 p.m.7 views

CVE-2022-41272

CVE-2022-41272 En este repositorio, escribiremos brevemente información sobre la vulnerabilidad CVE-2022-41272. La vulnerabilidad existe en el servicio SAP P4 que se ejecuta en el puerto 5NN04. Donde NN es un número de instancia, que puede ser del 00 al 99. Hay funciones de llamada remota que un...

9.9CVSS7AI score0.01028EPSS
SaveExploits0
Rows per page
Query Builder