inurl:"/irj/go/km/" intext:navigation
AUTHOR: FlyingFrog Twitter: @ItsKarl0z ++ SAP files, filesystem information, file structure ++ inurl:”/irj/go/km/" intext:navigation - extract SAP server documents - Find SAP server - Find server structure - Find usernames and passwords - Find sensitive data - To exploit go to site and click on “Navigation user interface” - 1.890 results at the time of writing DISCLAIMER: (The vulnerabilities are suggestions, none of them have been tested by me, always request permission before testing anything on someone else system) |