New sapyto - The SAP Penetration Testing Framework - release!

[Former Member]

Dear colleague,

I am pleased to announce that a new sapyto version (v0.99-Public_Edition) is ready.

sapyto is the first and unique SAP Penetration Testing Framework, which assists security professionals in assessing the security level of these business-critical systems.

There have been many changes in this version, being some of the most important ones:

. Windows support! Now sapyto runs on Windows 2000/2003/XP/Vista.

. Automatic connector discovery and target configuration.

. The so-far-missing sapyto's User Guide.

. Vulnerability reporting and analysis.

. Improved CLI with autocompletion, better help and presentation.

. Architecture changed quite a bit, in order to support for upcoming releases (GUI).

. New plugins for discovering SAP Application Servers, assess SAP/Oracle implementations and more ...

The Public_Edition of sapyto is opensource and free, shipped with basic plugins to analyze the security of SAP systems.

You can download this version directly from http://www.cybsec.com/sapyto

I hope you enjoy this new release.

As always, comments, bug reports, feature requests and new ideas are more than welcome and will be seriously considered.

sapyto v1.00 (with a nice GUI and many more features) is just around the corner... Stay tuned!

Best Regards,

Mariano Nuñez Di Croce

[Former Member]

Hi Mariano,

This is a great tool. I have been searching a long time for a toolset like this and I must say it is unique.

Do you happen to know the final release date for the gui version (yeah, command lines are powerfull, but gui's are so friendly!).

Keep up the good work, and if you are looking for testers.... Please let me know.

Regards,

Joris van de Vis

Amsterdam, NL