CVE-2020-6287 PoC — SAP NetWeaver AS JAVA 授权问题漏洞

Description

Checker help to verify created account or find it's mandat

Readme

# SAP_CVE-2020-6287_find_mandate
Checker help to verify created account or find it's mandat

The script allows you to check whether the account was created when using the exploit RECON.py or find the mandate of the created account 

## Exploit:

   https://github.com/chipik/SAP_RECON
      
   
## Quick start:

chmod +x 

./checker_CVE-2020-6287.sh \<start mndt> \<stop mndt> \<ip> \<port> \<login> \<password>
```
    - <start mndt> : first value of mandate for iterate (000-999) useful for me 000,001,002,003,004,005,006,007,008,009,066,100,150,200,500,520
    - <stop mndt> : last value for iterate
    - <ip> : IP address of vulnerable host
    - <port> : endpoint of vulnerable service
    - <login> : login created with RECON.py
    - <password> : password created with RECON.py
```    
### Helpfull oneliner:

for i in {000,001,002,003,004,005,006,007,008,009,066,100,150,200,500,520}; do ./checker_CVE-2020-6287.sh ${i} ${i} \<ip> \<port> \<login> \<password>;done

![My Image](Screen.png)

The first value is a mandate. Code 302 says, the user is exist.

File Snapshot

Remarks