SAP_CVE-2020-6287_find_mandate

Checker help to verify created account or find it's mandat

The script allows you to check whether the account was created when using the exploit RECON.py or find the mandate of the created account

Exploit:

https://github.com/chipik/SAP_RECON

Quick start:

chmod +x

./checker_CVE-2020-6287.sh <start mndt> <stop mndt> <ip> <port> <login> <password>

    - <start mndt> : first value of mandate for iterate (000-999) useful for me 000,001,002,003,004,005,006,007,008,009,066,100,150,200,500,520
    - <stop mndt> : last value for iterate
    - <ip> : IP address of vulnerable host
    - <port> : endpoint of vulnerable service
    - <login> : login created with RECON.py
    - <password> : password created with RECON.py

Helpfull oneliner:

for i in {000,001,002,003,004,005,006,007,008,009,066,100,150,200,500,520}; do ./checker_CVE-2020-6287.sh ${i} ${i} <ip> <port> <login> <password>;done

The first value is a mandate. Code 302 says, the user is exist.