CVE-2016-2388

This is a detailed advisory describing an information disclosure vulnerability in SAP NetWeaver AS JAVA 7.1-7.5. The vulnerability allows an anonymous attacker to retrieve a list of SAP users via a specific HTTP request to a WebDynpro resource.

This exploit demonstrates a time-based SQL injection (CVE-2016-2386) in SAP NetWeaver AS Java UDDI 7.11-7.50, leveraging information disclosure (CVE-2016-2388) to retrieve administrator credentials. It uses a SOAP request to extract password hashes via blind SQLi.

This repository contains a functional Python exploit for CVE-2016-2386, a time-based SQL injection vulnerability in SAP NetWeaver AS Java UDDI 7.11-7.50. The exploit demonstrates the vulnerability by extracting hashed credentials from the UME_STRINGS table and includes detailed technical explanations of the attack vector.