Service discovery & enumeration

The HANA Database SQL client port of the systems index server provides access to the SQL/MDX functionality of the database via JDBC/ODBC. Database clients for administration and development need access to this service. The encrypted communication can be configured using TLS. Wide exposure to administrative database services comes with inherent risks. Specifically weak passwords, insufficient TLS configuration, and hardening and patching of the HANA system can expose an attached surface for various exploit scenarios.

Common used Network Ports:

• 3XX15

• Nmap:
  • nmap -sV -R -p30015 -Pn <Target Address(es)/Domain Name>
  • nmap -sSVC -n -Pn -p30015 --datadir . <Target Address(es)/Domain Name> (NMAP ERPscan probes)