Skip to content
Nuclei Templates

SAPRouter - Routing information leak

ID: sap-router-info-leak

Severity: critical

Author: randomstr1ng

Tags: network,sap,misconfig,saprouter,tcp

Description

Section titled “Description”

SAPRouter contains an information leakage vulnerability.

YAML Source

Section titled “YAML Source”
id: sap-router-info-leak


info:
  name: SAPRouter - Routing information leak
  author: randomstr1ng
  severity: critical
  description: SAPRouter contains an information leakage vulnerability.
  reference:
    - https://securityforeveryone.com/tools/saprouter-routing-information-leakage-vulnerability-scanner
    - https://support.sap.com/en/tools/connectivity-tools/saprouter.html
  metadata:
    max-request: 1
  tags: network,sap,misconfig,saprouter,tcp


tcp:
  - inputs:
      - data: 00000022524f555445525f41444d002802000000000000000000000000000000000000000000
        type: hex


    host:
      - "{{Hostname}}"
    port: 3299
    read-size: 2048


    matchers:
      - type: word
        words:
          - "Routtab"
          - "Working directory"
          - "SAProuter Connection Table"
# digest: 4a0a00473045022100a20a823f331805c8a5c869eb3ee01f8b9bb7ea0b5941c76e1dc0dec21fe86ae502205820dfe57e65d5347698d16ee077267e80d6c7a725ee1f849afdb5f232a94365:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

Section titled “Guide to check the vulnerabilities”

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "network/misconfig/sap-router-info-leak.yaml"

View on Github