PoC for CVE-2020-6207 [Fixed] (Missing Authentication Check in SAP Solution Manager)

[datagroove DF Member Posts:1,502 Threads:1,018 Reputation 1]

Yesterday i was reading a article in zdnet about a fresh exploit and PoC that allow remote code execution with the possibility to completely automate the exploitation. The PoC is easy to use and it only require some command lines to check if a host is vulnerable or not. If vulnerable it can execute exes.

View the article:
https://www.zdnet.com/article/automated-...-the-wild/

Note: The file is almost equal to the original but there is some fixes. Credits removed, User-Agent in the payload had a tracking code which was removed too.

Download:
http://j.gs/19214853/poc-for-cve-2020-6207-
https://filecrypt.cc/Container/99CCC86998.html
https://rapidgator.net/file/a0fb149a332d...7.zip.html
https://ddownload.com/ez073qv4lq07
https://www.gulf-up.com/be36sdxve6i5
https://www.uploadship.com/8749b291bde4ee0a