Repositories list

• ABAP-Code-Scanner

  Public
  RedRays ABAP Code Analyzer: Open-Source Security Scanner for SAP ABAP

  securitystatic-code-analysissap+ 1abap-code-inspector

  Python

  •4•12•0•1•Updated Jun 2, 2025Jun 2, 2025

• CVE-2025-31324

  Public
  CVE-2025-31324, SAP Exploit

  Python

  •4•22•1•0•Updated Apr 28, 2025Apr 28, 2025

• redrays-cicd

  Public
  Python

  •0•0•0•0•Updated Apr 17, 2025Apr 17, 2025

• SAP-Threat-Modeling

  Public
  The SAP Threat Modeling Tool is an on-premises open-source web application designed to analyze and visualize connections between SAP systems, helping users identify security risks and vulnerabilities. With features like inputting SAP credentials, scanning for connections, and visualizing the network.

  securitysapmodeling+ 3threatthreat-modelingsap-security

  HTML

  •

  MIT License

  •14•50•0•0•Updated Mar 7, 2025Mar 7, 2025

• SAP-Security-Training

  Public
  Welcome to the SAP Security Training repository by RedRays. This repository serves as an informational hub for our comprehensive SAP security training programs, including our highly-rated Udemy course and our intensive three-day practical training.

  vulnerabilitysap-securitysap-training+ 2abap-securitysap-security-administration

  0•1•0•0•Updated Oct 1, 2024Oct 1, 2024

• pysap

  Public
  pysap is an open source Python library that provides modules for crafting and sending packets using SAP's NI, Diag, Enqueue, Router, MS, SNC, IGS, RFC and HDB protocols.

  Python

  •

  GNU General Public License v2.0

  •65•0•0•1•Updated Sep 3, 2024Sep 3, 2024

• sap-reposrc-decompressor

  Public
  SAP Report Source Decompressor

  C++

  •

  GNU General Public License v2.0

  •6•1•0•0•Updated Aug 27, 2024Aug 27, 2024

• nmap

  Public
  Nmap - the Network Mapper. Github mirror of official SVN repository.

  C

  •

  Other

  •2.7k•0•0•0•Updated Aug 13, 2024Aug 13, 2024

• sap_ms

  Public
  SAP Message Server research presented at OPCDE 2019

  Python

  •

  GNU General Public License v2.0

  •9•0•0•0•Updated Aug 13, 2024Aug 13, 2024

• ClassicSecStoreDecryptor

  Public
  A Java-based utility for decrypting SecStore properties and key files. Features automatic and manual decryption modes, custom file path support, and compatibility with various SecStore encryption versions.

  Java

  •0•0•0•0•Updated Aug 6, 2024Aug 6, 2024

• www-project-sap-threat-modeling-builder

  Public
  OWASP Foundation web repository

  HTML

  •

  MIT License

  •2•0•0•0•Updated Jul 31, 2024Jul 31, 2024

• SAP-Penetration-Testing

  Public
  SAP Penetration Testing: A Comprehensive Analysis of SAP Security Issues

  4•39•0•0•Updated Nov 23, 2023Nov 23, 2023

• WS_RaceCondition_PoC

  Public
  Simple PoC for demonstrating Race Conditions on Websockets

  pocvulnerabilityrace-conditions

  Java

  •5•55•0•0•Updated Sep 14, 2023Sep 14, 2023

• sap-nmap-probes

  Public
  Nmap custom probes for better detecting SAP services

  Python

  •39•1•0•0•Updated Jun 20, 2023Jun 20, 2023

• CVE-2021-33690

  Public
  [CVE-2021-33690] Server Side Request Forgery vulnerability in SAP NetWeaver Development Infrastructure

  sapssrfcve-2021-33690

  1•0•0•0•Updated Jun 1, 2023Jun 1, 2023

• SAP_Cloud_Connector_SSFS_Decryption

  Public
  A PoC of decryption the SAP Cloud Connector SSFS

  Java

  •3•8•0•0•Updated May 22, 2023May 22, 2023

• CVE-2022-41272

  Public
  Improper access control in SAP NetWeaver Process Integration

  0•3•0•0•Updated Dec 13, 2022Dec 13, 2022

• CVE-2022-39802

  Public
  [CVE-2022-39802] File path traversal vulnerability in SAP Manufacturing Execution

  securityexploitsap+ 4vulnerabilitycve0dayzero-day

  0•3•0•0•Updated Oct 16, 2022Oct 16, 2022