Issues

• Password spray functionality needs to be extended with checking passwords via RFC, instead of DIAG

  SecuritySilverbacks/SAPMAP#106 · Filter by author kloris opened on Oct 7, 2026

• Graphical rendering of nodes on canvas is not good enough when there are 100+ systems

  enhancement
  SecuritySilverbacks/SAPMAP#99 · Filter by author supersache opened on Oct 7, 2026
  2

• Web Dispatcher discovery: missing or inconsistent logic 3: "Rediscover Web Dispatcher topology" is lost

  bug
  SecuritySilverbacks/SAPMAP#93 · Filter by author cyberschubid00 opened on Oct 6, 2026

• Feature proposal: Allow manual cleanup of non-relevant instances from UI

  enhancement
  SecuritySilverbacks/SAPMAP#92 · Filter by author cyberschubid00 opened on Oct 6, 2026
  1

• Feature proposal: Consider system type SAP(Host)Control

  SecuritySilverbacks/SAPMAP#91 · Filter by author cyberschubid00 opened on Oct 6, 2026

• Web Dispatcher discovery: missing or inconsistent logic 2: Deep scan from scratch on partial range

  SecuritySilverbacks/SAPMAP#90 · Filter by author cyberschubid00 opened on Oct 6, 2026

• Web Dispatcher discovery: missing or inconsistent logic 1:Manually added Web Dispatcher

  SecuritySilverbacks/SAPMAP#89 · Filter by author cyberschubid00 opened on Oct 6, 2026

• SCC credentials exposed in UI

  SecuritySilverbacks/SAPMAP#87 · Filter by author cyberschubid00 opened on Oct 6, 2026

• Feature proposal: Lock discovered systems

  SecuritySilverbacks/SAPMAP#85 · Filter by author cyberschubid00 opened on Oct 6, 2026
  1

• sap_gw_xpg_standalone runs into timeout in step 3

  SecuritySilverbacks/SAPMAP#79 · Filter by author supersache opened on Oct 5, 2026
  2

  

• Feature idea: Lateral movement from one system to another system that is installed on the same host leveraging RFC Gateway

  SecuritySilverbacks/SAPMAP#70 · Filter by author supersache opened on Oct 1, 2026

• Duplicate Web Dispatcher default-credential findings generated from the same false-positive detection

  bug
  SecuritySilverbacks/SAPMAP#64 · Filter by author randomstr1ng opened on Sep 30, 2026

• False positive: Web Dispatcher default credentials reported as valid based on HTTP 2xx response

  bug
  SecuritySilverbacks/SAPMAP#63 · Filter by author randomstr1ng opened on Sep 30, 2026

• Add scanning alternative

  enhancement
  SecuritySilverbacks/SAPMAP#45 · Filter by author kloris opened on Sep 16, 2026

• Migrate the README to Github Wiki

  documentationenhancement
  SecuritySilverbacks/SAPMAP#43 · Filter by author randomstr1ng opened on Sep 15, 2026

• Build a practical exploitation of cve-2026-58240 (current state is a "confirmed vulnerable + trust-list polluted" primitive, not a "we own the box" primitive)

  enhancement
  SecuritySilverbacks/SAPMAP#42 · Filter by author kloris opened on Sep 12, 2026

• Customer feedback --> Authentication / authorisation

  enhancement
  SecuritySilverbacks/SAPMAP#40 · Filter by author kloris opened on Aug 26, 2026
  1

• Expand LPE: paths to obtain SAP_ALL from a non-SAP_ALL user

  enhancement
  SecuritySilverbacks/SAPMAP#33 · Filter by author kloris opened on Aug 4, 2026

• Fix / expand support for Java-based systems

  enhancement
  SecuritySilverbacks/SAPMAP#32 · Filter by author kloris opened on Aug 4, 2026

• Compatibility testing against multi-app-server ORA, HA, CAL, and other SAP variants

  testing
  SecuritySilverbacks/SAPMAP#29 · Filter by author kloris opened on Aug 4, 2026

• Compliance-tag dictionary (SOX / GDPR / NIS2) on findings and reports

  enhancement
  SecuritySilverbacks/SAPMAP#28 · Filter by author kloris opened on Aug 4, 2026

• Import additional vulns from earlier found vulns, see research excel

  enhancement
  SecuritySilverbacks/SAPMAP#24 · Filter by author kloris opened on Aug 4, 2026

• Persistence menu (ICF backdoor, cross-client users, SM36 DDIC job, transport injection)

  enhancement
  SecuritySilverbacks/SAPMAP#22 · Filter by author kloris opened on Aug 4, 2026

• Leverage ABAP SecStore findings for remote user creation via DB

  enhancement
  SecuritySilverbacks/SAPMAP#21 · Filter by author kloris opened on Aug 4, 2026
  1

• 10KBlaze on Linux and Windows ABAP appears broken

  bug
  SecuritySilverbacks/SAPMAP#20 · Filter by author kloris opened on Aug 4, 2026
  2