Cатсн²² (in)sесuяitу / ChrisJohnRiley
Because we're damned if we do, and we're damned if we don't!
sap_mgmt_con_extractusers
Module Name: sap_mgmt_con_extractusers
Module Type: Auxiliary
Module Path: /auxiliary/scanner/sap
Note: The following modules were committed to the Metasploit main SVN tree [r11858] on 2011.03.02
SAP Management Console Extract SAP Usernames
This module simply attempts to extract SAP users from the ABAP Syslog through the SAP Management Console SOAP Interface. SAP Management Console communicates by default over port 5<instance ID>13 (default 50013) using clear text SOAP requests. Some webmethods are restricted.
The users extracted using this module are those that are present in the ABAP Syslog and may no be a full list of all system users.
Download: Google Code Download List
Demonstration: Video