Issues

• Feature idea: Lateral movement from one system to another system that is installed on the same host leveraging RFC Gateway

  SecuritySilverbacks/SAPMAP#70 · Filter by author supersache opened on Oct 1, 2026

• Feature idea: Password spraying feature

  SecuritySilverbacks/SAPMAP#69 · Filter by author supersache opened on Oct 1, 2026

• Feature idea: A script that querys all SAPGui login screens and scans it for keywords.

  SecuritySilverbacks/SAPMAP#68 · Filter by author supersache opened on Oct 1, 2026

• Duplicate Web Dispatcher default-credential findings generated from the same false-positive detection

  bug
  SecuritySilverbacks/SAPMAP#64 · Filter by author randomstr1ng opened on Sep 30, 2026

• False positive: Web Dispatcher default credentials reported as valid based on HTTP 2xx response

  bug
  SecuritySilverbacks/SAPMAP#63 · Filter by author randomstr1ng opened on Sep 30, 2026

• Add scanning alternative

  enhancement
  SecuritySilverbacks/SAPMAP#45 · Filter by author kloris opened on Sep 16, 2026

• Migrate the README to Github Wiki

  documentationenhancement
  SecuritySilverbacks/SAPMAP#43 · Filter by author randomstr1ng opened on Sep 15, 2026

• Build a practical exploitation of cve-2026-58240 (current state is a "confirmed vulnerable + trust-list polluted" primitive, not a "we own the box" primitive)

  enhancement
  SecuritySilverbacks/SAPMAP#42 · Filter by author kloris opened on Sep 12, 2026

• Customer feedback --> Authentication / authorisation

  enhancement
  SecuritySilverbacks/SAPMAP#40 · Filter by author kloris opened on Aug 26, 2026
  1

• Expand LPE: paths to obtain SAP_ALL from a non-SAP_ALL user

  enhancement
  SecuritySilverbacks/SAPMAP#33 · Filter by author kloris opened on Aug 4, 2026

• Fix / expand support for Java-based systems

  enhancement
  SecuritySilverbacks/SAPMAP#32 · Filter by author kloris opened on Aug 4, 2026

• Compatibility testing against multi-app-server ORA, HA, CAL, and other SAP variants

  testing
  SecuritySilverbacks/SAPMAP#29 · Filter by author kloris opened on Aug 4, 2026

• Compliance-tag dictionary (SOX / GDPR / NIS2) on findings and reports

  enhancement
  SecuritySilverbacks/SAPMAP#28 · Filter by author kloris opened on Aug 4, 2026

• Import additional vulns from earlier found vulns, see research excel

  enhancement
  SecuritySilverbacks/SAPMAP#24 · Filter by author kloris opened on Aug 4, 2026

• Persistence menu (ICF backdoor, cross-client users, SM36 DDIC job, transport injection)

  enhancement
  SecuritySilverbacks/SAPMAP#22 · Filter by author kloris opened on Aug 4, 2026

• Leverage ABAP SecStore findings for remote user creation via DB

  enhancement
  SecuritySilverbacks/SAPMAP#21 · Filter by author kloris opened on Aug 4, 2026
  1

• 10KBlaze on Linux and Windows ABAP appears broken

  bug
  SecuritySilverbacks/SAPMAP#20 · Filter by author kloris opened on Aug 4, 2026
  1

• Support for SuccessFactors / Ariba / Concur

  enhancement
  SecuritySilverbacks/SAPMAP#18 · Filter by author kloris opened on Aug 4, 2026

• SSO support (SNC / assertion tickets)

  enhancement
  SecuritySilverbacks/SAPMAP#17 · Filter by author kloris opened on Aug 4, 2026

• Fix distributed dbhost on HANA for GW exploit

  enhancement
  SecuritySilverbacks/SAPMAP#16 · Filter by author kloris opened on Aug 4, 2026

• IAS tenant fingerprint + IASTenantNode

  enhancement
  SecuritySilverbacks/SAPMAP#14 · Filter by author kloris opened on Aug 4, 2026

• Pivot traffic through an RFC gateway proxy

  enhancement
  SecuritySilverbacks/SAPMAP#12 · Filter by author kloris opened on Aug 4, 2026

• SAProuter: extract password (plaintext/hash) from saprouttab

  enhancement
  SecuritySilverbacks/SAPMAP#9 · Filter by author kloris opened on Aug 4, 2026

• [Feature Request] Expanded SAP Cloud Assessment Capabilities

  enhancement
  SecuritySilverbacks/SAPMAP#3 · Filter by author randomstr1ng opened on Jul 17, 2026
  2