Lucene search
+L

17875 matches found

Kitploit
Kitploit
added 2026/09/21 5:50 p.m.7 views

CVE-2016-2386

CVE-2016-2386 SAP NetWeaver AS JAVA - Inyección SQL en el componente UDDI root@kitploit: POST /UDDISecurityService/UDDISecurityImplBean HTTP/1.1 Host: host Connection: close Accept-Encoding: gzip, deflate Accept: / User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:78.0 Gecko/20100101...

9.8CVSS7.1AI score0.71522EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/21 3:28 p.m.11 views

sap_netweaver_cve-2025-31324-

This repository does not have a README...

10CVSS8.2AI score0.9947EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/21 3:10 p.m.12 views

CVE-2020-6308

CVE-2020-6308 Exploit script for SAP Business Objects SSRF This is a simple Golang script to automate the exploitation of CVE-2020-6308. The original Github repo did not show any automation https://github.com/InitRoot/CVE-2020-6308-PoC , thanks @InitRoot, so this was made in an effort to help...

5.3CVSS6.7AI score0.61736EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/21 2:12 p.m.11 views

CVE-2025-31324_PoC

CVE-2025-31324PoC 针对CVE-2025-31324的利用验证:SAP NetWeaver Visual Composer元数据上传器中的未授权上传 该脚本执行: 1. 向存在漏洞的端点上传文件(通过上传主机/端口) 2. 可选地通过HTTP GET触发(通过触发主机/端口) 3. 基本响应验证/日志记录 使用示例: python3 PoC.py --host sap.example.com --port 50000 --endpoint /irj/portal/sap/bc/webdynpro/sap/ZWDCMETADATAUPLDR --file...

10CVSS8.3AI score0.9947EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/21 2:07 p.m.9 views

SAP-brute

SAP-brute Bruteforcer de inicio de sesión de SAP Netweaver. root@kitploit: usage: SAP-brute.py -h -u URL -f FILE -p PROXY optional arguments: -h, --help show this help message and exit -u URL, --url URL URL to test -f FILE, --file FILE File of urls -p PROXY, --proxy PROXY Proxy for debugging Siti...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/21 2:00 p.m.8 views

CVE-2020-6286

CVE-2020-6286 SAP NetWeaver AS JAVA LM Configuration Wizard Directory Traversal SAP NetWeaver es la plataforma tecnológica integrada de SAP y la base técnica de todas las aplicaciones SAP desde SAP Business Suite. SAP NetWeaver es una plataforma de aplicación e integración orientada a servicios q...

5.3CVSS6.6AI score0.28312EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/21 1:47 p.m.11 views

CVE-2020-6287_SAP-NetWeaver-bypass-auth

CVE-2020-6287SAP-NetWeaver-bypass-auth Exploit automatizado para CVE-2020-6287 CVE-2020-6287: SAP NetWeaver AS JAVA LM Configuration Wizard, versiones - 7.30, 7.31, 7.40, 7.50, no realiza una comprobación de autenticación, lo que permite que un atacante sin autenticación previa ejecute tareas de...

10CVSS8.7AI score0.94719EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/21 1:45 p.m.7 views

CVE-2025-31324

Información ░█▄█░█▀█░█░█░█░█░█░█░▀█▀░█▀█░█▀█░█▀▄░█░█ ░█░█░█▀▀░█░█░█░█░█▄█░░█░░█░█░█░█░█▀▄░░█░ ░▀░▀░▀░░░▀▀▀░▀▀▀░▀░▀░▀▀▀░▀░▀░▀░▀░▀░▀░░▀░ N U L L T R A C E // NullTrace :: Sin registros. Sin ruido. Solo señal. // ----- FIRMA ----- Clave: ssh-rsa AAAAB3...NullKey...KFA== Huella:...

10CVSS8.2AI score0.9947EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/21 1:09 p.m.15 views

CVE-2017-12637_SAP-NetWeaver-URL-Traversal

CVE-2017-12637SAP-NetWeaver-URL-Traversal LFI Scanner de prueba de concepto: detección automatizada de exposiciones de /etc/passwd mediante directory traversal y coincidencia de regex. root@kitploit: LFI Scanner Una prueba de concepto ligera en Python para escanear hosts objetivo en busca de...

7.5CVSS8.5AI score0.95111EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/21 12:45 p.m.7 views

CVE-2022-41272

CVE-2022-41272 En este repositorio, escribiremos brevemente información sobre la vulnerabilidad CVE-2022-41272. La vulnerabilidad existe en el servicio SAP P4 que se ejecuta en el puerto 5NN04. Donde NN es un número de instancia, que puede ser del 00 al 99. Hay funciones de llamada remota que un...

9.9CVSS7AI score0.01028EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/21 12:32 p.m.7 views

CVE-2025-31324

CVE-2025-31324 CVE-2025-31324, Exploit SAP root@kitploit: POST /developmentserver/metadatauploader?CONTENTTYPE=MODEL&CLIENT=1 HTTP/1.1 Host: 127.0.0.1:8000 User-Agent: python-requests/2.32.3 Accept-Encoding: gzip, deflate, zstd Accept: / Connection: keep-alive Content-Length: 636 Content-Type:...

10CVSS8.6AI score0.9947EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/21 9:17 a.m.15 views

SAP_RECON

PoC para CVE-2020-6287, CVE-2020-6286 vulnerabilidad SAP RECON ¡Pffff! ¿RECON Remotely Exploitable Code On NetWeaver? ¿En serio, chicos? ¿Ese fue el mejor nombre en clave que se les ocurrió? : Este script permite verificar la vulnerabilidad de falta de comprobación de autorización del Asistente d...

10CVSS7.5AI score0.94719EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/21 7:50 a.m.81 views

powersap

PowerSAP PowerSAP is a simple powershell re-implementation of popular & effective techniques of all public tools such as Bizploit, Metasploit auxiliary modules, or python scripts available on the Internet. This re-implementation does not contain any new or undisclosed vulnerability. PowerSAP allo...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/21 7:50 a.m.8 views

powersap

PowerSAP PowerSAP 是对所有公开工具中流行且有效的技术(如 Bizploit、Metasploit 辅助模块或互联网上可用的 Python 脚本)的简单 PowerShell 重新实现。此重新实现不包含任何新的或未公开的漏洞。 PowerSAP 允许通过 .Net 连接器 'NCo' 访问 SAP RFC。 致谢 所有功劳归于: Onapsis - Mariano, Jordan… ERPScan @chipik ERPSEC - Joris van De Vis @jvis Chris John Riley @ChrisJohnRiley Agnivesh...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/21 5:24 a.m.10 views

jsp-webshell-scanner

Escáner de Webshell JSP para SAP CVE-2025-31324 y Triage de IOC de PeopleSoft Un script ligero para escanear archivos .jsp y .jspx en busca de patrones sospechosos típicamente asociados con webshells basadas en JSP, incluyendo aquellos observados en ataques que explotan SAP NetWeaver...

10CVSS8.3AI score0.9947EPSS
SaveExploits19
Nuclei
Nuclei
added 2026/09/21 2:08 a.m.141 views

SAP NetWeaver AS JAVA 7.30-7.50 - Remote Admin Addition

SAP NetWeaver AS JAVA LM Configuration Wizard, versions 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an attacker without prior authentication to execute configuration tasks to perform critical actions against the SAP Java system, including the ability to create an...

10CVSS8.5AI score0.94719EPSS
SaveExploits6References5
Nuclei
Nuclei
added 2026/09/21 2:08 a.m.196 views

SAP NetWeaver Visual Composer Metadata Uploader - Deserialization

SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availabili...

10CVSS8.1AI score0.9947EPSS
SaveExploits19References4
Kitploit
Kitploit
added 2026/09/21 12:45 a.m.10 views

Onapsis_CVE-2025-31324_Scanner_Tools

Escáner de Vulnerabilidad e Indicador de Compromiso IoC para CVE-2025-31324 Vulnerabilidad de Carga de Metadatos de Visual Composer CVE-2025-31324 es una vulnerabilidad crítica CVSSv3 10 que afecta a los sistemas SAP NetWeaver, específicamente dentro del componente Visual Composer Metadata...

10CVSS8.6AI score0.9947EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/20 11:05 p.m.15 views

CVE-2026-58231

Script de detección de CVE-2026-58231 Herramienta de detección y verificación de precondiciones para CVE-2026-58231 — autorización inadecuada en el componente Data Hub Adapter de SAP Commerce Cloud CVSS 10.0. El script realiza únicamente comprobaciones no destructivas. No incluye ni ejecuta ningú...

10CVSS9AI score0.0171EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/20 10:37 p.m.11 views

CVE-2020-6287-Sap-Add-User

CVE-2020-6287-Sap-Add-User Agregar usuario administrador al portal SAP NetWeaver...

10CVSS8.6AI score0.94719EPSS
SaveExploits6
Rows per page
Query Builder