CVE-2020-6308 PoC — SAP 多款产品代码问题漏洞

Source

https://github.com/TheMMMdev/CVE-2020-6308

Associated Vulnerability

Title:SAP 多款产品代码问题漏洞 (CVE-2020-6308)
Description:SAP BusinessObjects Business Intelligence Platform (Web Services) versions - 410, 420, 430, allows an unauthenticated attacker to inject arbitrary values as CMS parameters to perform lookups on the internal network which is otherwise not accessible externally. On successful exploitation, attacker can scan internal network to determine internal infrastructure and gather information for further attacks like remote file inclusion, retrieve server files, bypass firewall and force the vulnerable server to perform malicious requests, resulting in a Server-Side Request Forgery vulnerability.

Description

Exploit script for SAP Business Objects SSRF

Readme

# CVE-2020-6308
Exploit script for SAP Business Objects SSRF

This is a simple Golang script to automate the exploitation of CVE-2020-6308. The original Github repo did not show any automation (https://github.com/InitRoot/CVE-2020-6308-PoC , thanks @InitRoot), so this was made in an effort to help pentesters/red teamers to provide a proof of concept to clients. 

Warning: During the engagement this was created for, the specific webserver responded only after 10 seconds when a port was open. This specific parameter could change. If this is the case, only change the if condition in line 35.

Process could not be multithreaded due to the webserver only handling one request at a time and no accepting of a new request until first request is done.

File Snapshot


 [4.0K]  /data/pocs/576baae39498ea4480017c8a0dd5527f52c58502
├── [ 753]  README.md
└── [3.4K]  SAP-Objects-SSRF.go

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!