pysapactive

Contribution

pysap was authored as part of my intial research about the Diag protocol and published as an open source tool in July 2012. The tool was further expanded to cover other SAP’s network protocols and then file formats.

pysap was contributed to the OWASP CBAS Project in October 2022 by SecureAuth which was my employer at that time. It’s been actively maintained as part of the CBAS Project since that time.

Description

SAP Netweaver and SAP HANA are technology platforms for building and integrating SAP business applications. Communication between components uses different network protocols and some services and tools make use of custom file formats as well. While some of them are standard and well-known protocols, others are proprietaries and public information is generally not available.

pysap is an open source Python library that provides modules for crafting and sending packets using SAP’s NI, Diag, Enqueue, Router, MS, SNC, IGS, RFC, NWRFC and HDB protocols. In addition, support for creating and parsing different proprietary file formats is included. The modules are built on top of Scapy and are based on information acquired at researching the different protocols, file formats and services.