Skip to main content

SAP Pentest Playbook

Navigation

Getting Started
SAP Business Technology Platform
- Technology Overview
- Reconnaissance
- Known Attack Vectors
  - BTP Destinations
  - Exposed SOAP Services
SAP ABAP Platform
SAP NetWeaver JAVA
- Technology Overview
- Reconnaissance
- Known Attack Vectors
Other SAP Solutions
- SAP Cloud Connector
  - SAP Cloud Connector exposed services
- SAProuter
Other SAP Cloud Solutions

More

OWASP Project Page
SAP Pentest Playbook @ Github

Abap

2 posts Transport Creation

Access

One post Network File Access

Confirmation

One post Code Verification

Creation

One post Transport Creation

Execution

One post Executing Import

File

3 posts CG3Z Upload Transaction

Files

One post Put Transport Files to Destination

Frontend

One post CG3Z Upload Transaction

Function

One post WS_FILE_COPY Function Module

Import

2 posts Executing Import

1/3

Built with Hugo and

Content licensed under CC BY-SA 4.0