One of the main issues I came across when starting research in SAP security (and SAP in general) was the seeming lack of demo software available and the difficulty getting what demo versions there were up and running. This has also been the number 1 question I’ve received over the last few months… “How do I get a trial version for my lab”!
With that in mind I’ve collected up the links I’ve used over the past few months into a single post for those that are interested in setting up an SAP test lab and playing about with it.
These trial versions are slightly limited as they don’t offer the ability to update them to the latest build (which is an issue when it comes to security research). They also rely on MaxDB (formerly SAP DB) by default (although I believe one uses IBM DB/2 just for fun). They might be able to be configured to use external databases (Oracle etc…) but with this you’re on your own! I’m as far from a SAP expert as you could probably find.
I’ve tried to break things down by platform as one of my aims was to get and install a few different versions for tool testing. These trials are memory hungry, CPU hungry at times, and need a lot of disk space (>42GB for a single VM).
Note: SAP isn’t for the faint of heart, and getting things running 100% is never going to be easy! Don’t say I didn’t warn you 😉
You’ll need to sign-up for a free SAP Community Network (SCN) user account to download most of these files. This will also give you access to the forums.
Linux
SAP NetWeaver 7.0 – Trial Version on Linux –> DOWNLOAD
(N4S) SAP NETWEAVER 7.0 – SAP WEB APPLICATION SERVER ON LINUX (DVD) –> REQUEST DVD
Windows
SAP NetWeaver AS ABAP 7.02 SP6 32-bit Trial –> DOWNLOAD
Step by Step Installation of SAP NetWeaver 7.01 SR1 SP3 ABAP Trial Version in Oracle VirtualBox Part 1/3 –> GUIDE
SAP NETWEAVER 2004S ABAP TRIAL VERSION – TROUBLESHOOTING GUIDE –> GUIDE
Notes: A few points you might want to check before beginning with the install.
- RAM
- I got away with running this on 1.5GB of RAM, but it really needs >2GB to run smoothly
- SWAP
- Don’t even bother starting your install without >4GB of swapfile initialized. The installer will only complain about the lack of swap after you’ve configured the whole install… you’ve been warned!
- Disk Space
- Lots…. I made a VM with a 50GB second disk purely for the MaxDB
- JRE
- It might look like things are all working fine with 1.6.x but I only had issues with the system afterwards or during install (crashed my vmware fusion). Stick to JRE 1.4.x latest (worked fine for me).
VMWARE (LINUX SLES)
(CTB) SAP NetWeaver 7.0 – Java Trial Version on Linux – VMware Edition –> DOWNLOAD
Novell Link to CTB SLES images –> DOWNLOAD
GETTING STARTED SAP NETWEAVER 7.0-JAVA-VMWARE-TRIAL –> GUIDE
SAP ON LINUX: TEST DRIVES – TIPS AND TRICKS –> GUIDE
Notes: This VM is meant to be a sealed unit where you access it from a second system for management etc. I had issues getting the Visual Administrator to connect, and also getting the config tool running on the local system.
Some guides reference the n4sadm user (these guides are written for the pure Linux version of SAP and not the VM version). You might find you have more luck using the ctbadm when the guide says n4sadm.
Oh and the root password is “sap123”
Licensing
This page seems to be the main hub for what SAP now call “minisap” (originally TRIAL version).
You’ll need to run some commands on the SAP install and extract the resulting codes to request a key through this link.
http://www.sap.com/minisap/
LINKS:
Cатсн²² (in)sесuяitу / ChrisJohnRiley 