Package: offlinesec-client
Offline Security ClientYou definitely haven't seen such approach before! Suitable for those who would like to protect his SAP systems and donвЂ™t want to pay a lot. Or maybe you are only interested in Compliance topic.
So, Offline Security is cloud based application which is intended to assess security aspects of SAP systems. All needed information for our security reports/analytics you gather yourself (or you can easily automate it using any RPA solution). Then you send us all gathered information (using cli tool). Important: All sensitive information (SAPSIDs, IP addresses, server names, and so on) is masked. And we donвЂ™t request any identity data of our clients.  It means that NOBODY вЂ“ our administrators, developers or external hacker canвЂ™t link this information with particular client, particular system or particular company.
Finally, we produce analysis on server side and issue for you report which can download only you (client application that sent all data).AdvantagesQuick start: Only you need to install client tool using one cli commandFull Transparency. All configurations files are open. The source code of client application is available to read as wellYou don't need to invest money to SAP Solution Manager consultants or buy expensive products like Onapsis or SecurityBridgeDon't need to create user account in target SAP systems. Don't need to install any ABAP codePossibility of customisation. Based on predefined check list you can create your own checks (probably even not related to Information Security)Our database is regularly updated. Always base checks are available out-of-box. Even you can see what configurations are used by other clientsCool reports, easy to use with predefined filter optionsTable of contentsInstallationQuick StartUse CasesImportant NotesInstallationPython installationInstall last version of Python 3.xfrom hereWe support only Python 3.x!Published version installation (recommended)pip3installofflinesec_clientorpython3-mpipinstallofflinesec_clientInstallation last version from repository ongithub.comgitclonehttps://github.com/offlinesec/offlinesec-client.git
python3-mpipinstall--upgradepip
pip3installsetuptoolswheel
python3setup.pybdist_wheel
python3-mpipinstalldist\offlinesec_client-1.0.8-py3-none-any.whlThe Version could be different! Please verify generated wheel name.Upgrade to last published versionpip3install--upgradeofflinesec_clientCheck what version is installedpip3showofflinesec_clientQuick StartHow to discovery missed SAP Security Notes:Prepare text file with installed SAP software component versions (details)Send prepared file to server (optional you can set SAP system name):offlinesec_sap_notes-f"software_components.txt"-s"Demo System"Wait aprox 5 minutes (Depends on server load)Download your report:offlinesec_get_reportsFind your downloaded report in Downloads folder. Enjoy.Use CasesSAP Security Notes Analysis (Vulnerabilities Check)How to prepare data and request reportReport exampleOur knowledge base is constantly updated and contain all SAP security notes released in 2015-2023. You can find the date of last loaded SAP Security Note in your report.since version 1.0.29 SAP Business Object systems are supportedsince version 1.0.30 SAP JAVA systems are supportedProfile Parameters/Compliance Analysis (SAP Security Baseline Checks)
(Available since version 1.0.12)How to generate reportReport ExampleAll sensitive information is excluded from the upload file (SAPSIDs, server names, ...)Please remember you can create your own check variants. The details are availablehereRoles/Critical Privileges Analysis (Available since version 1.0.15)How to generate reportReport ExampleAll sensitive information is excluded from the upload file (Role names)Please remember you can create your own check variants. The details are availablehereTransport Request AnalysisWill be available in next releasesSAP Security Audit Log AnalysisWill be available in next releasesIf you need more  - email meinfo@offlinesec.com.Important Notes:We don't collect any client identity like email address, SAP SIDs, company, ip addresses. All Checks are performed fully anonymously.The reports aren't stored on server side. Once you have downloaded the report it's deleted.All data transferred to server are encrypted with HTTPS protocol.The report could download only the person who has token (Random String generated on first start).You can download reports within 10 days after it was requested.Review the source code. You can be 100% confident what happening on client side with your data and how it is processed.Additional documentation is availablehereKnown IssuesSSL issue when communicate with the server
NotOpenSSLWarning: urllib3 v2.0 only supports OpenSSL 1.1.1+, currently the 'ssl' module is compiled with 'LibreSSL 2.8.3'.pip3installurllib3==1.26.15During installation
WARNING: The scripts offlinesec_get_reports, offlinesec_inverse_transform, offlinesec_sap_notes, offlinesec_sap_params and offlinesec_sap_roles are installed in '/Users//Library/Python/3.8/bin' which is not on PATH.exportPATH="$PATH:/Users/<username>/Library/Python/3.8/bin"Uninstallpython3-mpipuninstallofflinesec_client