PowerSAP is a simple powershell re-implementation of popular & effective techniques of all public tools such as Bizploit, Metasploit auxiliary modules, or python scripts available on the Internet. This re-implementation does not contain any new or undisclosed vulnerability.
PowerSAP allows to reach SAP RFC with .Net connector 'NCo'.
All credit goes to:
- Onapsis - Mariano, Jordan…
- ERPScan (@_chipik)
- ERPSEC - Joris van De Vis (@jvis)
- Chris John Riley (@ChrisJohnRiley)
- Agnivesh Sathasivam and Dave Hartley (@nmonkee)
- Martin Gallo (@MartinGalloAr)
-
Quick summary: Powershell SAP assessment tool
-
Version: 0.1
-
Dependencies: .Net connector "NCo" https://websmp201.sap-ag.de/public/connectors
-
Configuration: Copy sapnco.dll & sapnco_utils.dll in NCo_x86/NCo_x64 folders.
- Test your .Net Connector 'NCo':
PS C:\PowerSAP\Standalone> .\Get-NCoVersion.ps1
NCo Version: 3.0.13.0 Patch Level: 525 SAP Release: 720
- How to run testis:
Invoke PS scripts in the Standalone folder.
Feel free to contribute and add features.
Simple bruteforce attack on SAP RFC
READ_TABLE RFC function module call through SOAP request
