Cатсн²² (in)sесuяitу / ChrisJohnRiley

Because we're damned if we do, and we're damned if we don't!

sap_mgmt_con_extractusers

Module Name: sap_mgmt_con_extractusers

Module Type: Auxiliary

Module Path: /auxiliary/scanner/sap

Note: The following modules were committed to the Metasploit main SVN tree [r11858] on 2011.03.02

SAP Management Console Extract SAP Usernames

This module simply attempts to extract SAP users from the ABAP Syslog through the SAP Management Console SOAP Interface. SAP Management Console communicates by default over port 5<instance ID>13 (default 50013) using clear text SOAP requests. Some webmethods are restricted.

sap_mgmt_con_extractusers.jpg

The users extracted using this module are those that are present in the ABAP Syslog and may no be a full list of all system users.

Download:  Google Code Download List

DemonstrationVideo

%d bloggers like this: