CVE-2021-38163

This repository contains a functional exploit for CVE-2021-38163, targeting SAP NetWeaver Visual Composer. The exploit authenticates as a non-administrative user, uploads a malicious JSP file via a path traversal vulnerability, and executes arbitrary OS commands with the privileges of the Java Server process.

This repository contains a functional exploit for CVE-2021-38163, which targets SAP NetWeaver AS Java. The exploit leverages path traversal and file upload vulnerabilities to achieve remote code execution by deploying a malicious JSP file.