This is a placeholder for future post, on backdooring SAP servers: 1. SAP profile SETENV_xx parameter - if get local access, or SAP level access can cat or echo a line into profile parameter file - concatenated command for SETENV_+xx param 2. Using ABAP program + SM37 - ABAP program to fetch comamnd from a remote server (HTTP-GET ABAP Function Module) - schedule job every 2 minits interval - for that job, set spool recipient to remote attacker email so output can be sent over - Pre-req: SCOT configuration, Auth for SM36, SE38 to be continued.. //alak
Two good references: http://help.sap.com/fiori_bs2013/helpdata/en/bf/d1b053a647e842e10000000a4450e5/frameset.htm http://www.sapnwnewbie.com/2015/12/automating-frontend-configuration-of.html Following are the task available on STC01 to perform Fronend setup: SAP_FIORI_LAUNCHPAD_INIT_SETUP - To activate launchpad OData and HTTP services on an SAP Gateway system (frontend) SAP_SAP2GATEWAY_TRUSTED_CONFIG - To create a trusted connection from an SAP system to SAP Gateway. SAP_GATEWAY_ADD_SYSTEM - To connect an SAP system (backend) to an SAP Gateway system (frontend). SAP_GATEWAY_ADD_SYSTEM_ALIAS - To create a system alias for an existing remote function call destination (to backend). SAP_GATEWAY_ACTIVATE_ODATA_SERV - To activate multiple OData services. OData services are required to initially set up the SAP Fiori Launchpad and the SAP Fiori Launchpad designer. SAP_BASIS_ACTIVATE_ICF_NODES - To activate multiple HTTP Services (ICF). The SAP Fiori Launchpad uses the User interfa
Your blog is really helps for my search and i really like it.. Thanks a lot..:)
ReplyDeleteLiterature Review Examples
Numbering for Thesis and Dissertation <-- that's what i was looking for
ReplyDeleteThesis Dissertation
Good work.I like your awesome post..!
ReplyDeleteonline payday loans direct lenders
logo design
ReplyDeletebrochure design
I like this post..
ReplyDeleteDissertation Writing
nice work admin
ReplyDeleteTemplate Design
Psd to wordpress
am a blog beginner. I am also interested in such kind information. You provide me a good example. Thanks very much. I will keep on readin A word of appreciation for you
ReplyDeletedriving lessons sutton coldfield
driving lessons west bromwich
buy ritalin
Will bookmark this site later
ReplyDeletevalium
What a nice blog you have dear. Have bookmarked this site for later reference.
ReplyDeleteWanduhren
Wandbilder
apparel exporter
great blog, I have never commented on these blogs.
ReplyDeletekeylogger
Nice for being visiting your blog post again, many experts have months personally. This article that I have already been waited for that long.
ReplyDeleteseo training in Karachi