deardaniel/secdata-raw huggingface dataset:
Metasploit Module: Generic HTTP Directory Traversal Utility
Type: auxiliary
Path: modules/auxiliary/scanner/http/http_traversal.rb

Description:
This module allows you to test if a web server (or web application) is
          vulnerable to directory traversal with three different actions.

          The 'CHECK' action (default) is used to automatically (or manually) find if
          directory traversal exists in the web server, and then return the path that
          triggers the vulnerability.  The 'DOWNLOAD' action shares the same ability as
          'CHECK', but will take advantage of the found trigger to download files based on
          a 'FILELIST' of your choosing.  The 'PHPSOURCE' action can be used to download
          source against PHP applications.  The 'WRITABLE' action can be used to determine
          if the trigger can be used to write files outside the www directory.

          To use the 'COOKIE' option, set your value like so: "name=value".

Check method (fingerprinting):
(trigger)
    if datastore['TRIGGER'].empty?
      # Found trigger using fuzz()
      found = true if trigger
      uri = normalize_uri(datastore['PATH']) + trigger
    else
      # Manual check. meh.
      if datastore['FILE'].empty?
        print_error("Must specify a 'FILE' to check manually")
        return
      end

      uri = normalize_uri(datastore['PATH']) + trigger + datastore['FILE']
      req = ini_request(uri)
      vprint_status("Trying: #{build_url(uri)}")
      res = send_request_cgi(req, 25)
      found = true if res and res.to_s =~ datastore['PATTERN']
    end

    # Reporting
    if found
      print_good("Directory traversal found: #{trigger}")

      report_web_vuln({
        :host => rhost,
        :port => rport,
        :vhost => datastore['VHOST'],
        :path => uri,
        :params => normalize_uri(datastore['PATH']),
        :pname => trigger,
        :risk => 3,
        :proof => trigger,
        :name => self.fullname,
        :category => "web",
        :method => http_method
      })

    else
      print_error("No directory traversal detected")
    end
  end

  #
  # Action 'DOWNLOAD': Used to download a file with a directory traversal
  #
Metasploit Module: Vicidial SQL Injection Time-based Admin Credentials Enumeration
Type: auxiliary
Path: modules/auxiliary/scanner/http/vicidial_sql_enum_users_pass.rb
Disclosure date: 2024-09-10
References: URL-https://korelogic.com/Resources/Advisories/KL-001-2024-011.txt, CVE-2024-8503

Description:
This module exploits a time-based SQL injection vulnerability in VICIdial, allowing attackers
          to dump admin credentials (usernames and passwords) via SQL injection.
Metasploit Module: EtherPAD Duo Login Bruteforce Utility
Type: auxiliary
Path: modules/auxiliary/scanner/http/etherpad_duo_login.rb

Description:
This module scans for EtherPAD Duo login portal, and
          performs a login bruteforce attack to identify valid credentials.
Metasploit Module: TVT NVMS-1000 Directory Traversal
Type: auxiliary
Path: modules/auxiliary/scanner/http/tvt_nvms_traversal.rb
Disclosure date: 2019-12-12
References: CVE-2019-20085, EDB-47774

Description:
This module exploits an unauthenticated directory traversal vulnerability which
          exists in TVT network surveillance management software-1000 version 3.4.1.
          NVMS listens by default on port 80.
Metasploit Module: Linknat Vos Manager Traversal
Type: auxiliary
Path: modules/auxiliary/scanner/http/linknat_vos_traversal.rb
Authors: Nixawk
References: CVE-2025-34118, URL-http://www.linknat.com/, URL-http://www.wooyun.org/bugs/wooyun-2[PII_REDACTED]

Description:
This module attempts to test whether a file traversal vulnerability
          is present in version of linknat vos2009/vos3000
Metasploit Module: SAP BusinessObjects Version Detection
Type: auxiliary
Path: modules/auxiliary/scanner/http/sap_businessobjects_version_enum.rb
References: URL-http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf

Description:
This module simply attempts to identify the version of SAP BusinessObjects.
Metasploit Module: Netgear SPH200D Directory Traversal Vulnerability
Type: auxiliary
Path: modules/auxiliary/scanner/http/netgear_sph200d_traversal.rb
References: CVE-2013-10063, BID-57660, EDB-24441, URL-http://support.netgear.com/product/SPH200D, URL-http://www.s3cur1ty.de/m1adv2013-002

Description:
This module exploits a directory traversal vulnerability which is present in
        Netgear SPH200D Skype telephone.
Metasploit Module: PocketPAD Login Bruteforce Force Utility
Type: auxiliary
Path: modules/auxiliary/scanner/http/pocketpad_login.rb

Description:
This module scans for PocketPAD login portal, and
          performs a login bruteforce attack to identify valid credentials.
Metasploit Module: Microsoft IIS HTTP Internal IP Disclosure
Type: auxiliary
Path: modules/auxiliary/scanner/http/iis_internal_ip.rb
References: CVE-2000-0649, CVE-2002-0422, BID-1499, EDB-20096, URL-http://web.archive.org/web/[PII_REDACTED]4436/https://support.microsoft.com/en-us/help/218180/internet-information-server-returns-ip-address-in-http-header-content, URL-https://support.microsoft.com/en-us/topic/fix-the-internal-ip-address-of-an-iis-7-0-server-is-revealed-if-an-http-request-that-does-not-have-a-host-header-or-has-a-null-host-header-is-sent-to-the-server-c493e9bc-dfd3-0d9b-941c-b2d93a957d9e, URL-https://techcommunity.microsoft.com/t5/iis-support-blog/iis-web-servers-running-in-windows-azure-may-reveal-their/ba-p/826500

Description:
Collect any leaked internal IPs by requesting commonly redirected locations from IIS.
          CVE-2000-0649 references IIS 5.1 (win2k, XP) and older.  However, in newer servers
          such as IIS 7+, this occurs when the alternateHostName is not set or misconfigured. Also
          collects internal IPs leaked from the PROPFIND method in certain IIS versions.
Metasploit Module: CouchDB Login Utility
Type: auxiliary
Path: modules/auxiliary/scanner/couchdb/couchdb_login.rb

Description:
This module tests CouchDB logins on a range of
          machines and report successful logins.
Metasploit Module: CouchDB Enum Utility
Type: auxiliary
Path: modules/auxiliary/scanner/couchdb/couchdb_enum.rb
References: CVE-2017-12635, URL-https://justi.cz/security/2017/11/14/couchdb-rce-npm.html, URL-https://wiki.apache.org/couchdb/HTTP_database_API

Description:
This module enumerates databases on CouchDB using the REST API
          (without authentication by default).

Check method (fingerprinting):
return Exploit::CheckCode::Unknown('Failed to retrieve CouchDB version') unless get_version

    version = Rex::Version.new(@version)
    return Exploit::CheckCode::Unknown('CouchDB version string is empty') if version.version.empty?

    vprint_good("#{peer} - Found CouchDB version #{version}")

    return Exploit::CheckCode::Appears("CouchDB version #{version} is in the vulnerable range") if version < Rex::Version.new('1.7.0') || version.between?(Rex::Version.new('2.0.0'), Rex::Version.new('2.1.0'))

    Exploit::CheckCode::Safe('CouchDB version is not in the vulnerable range')
  end
Metasploit Module: CVE-2019-0708 BlueKeep Microsoft Remote Desktop RCE Check
Type: auxiliary
Path: modules/auxiliary/scanner/rdp/cve_2019_0708_bluekeep.rb
Disclosure date: 2019-05-14
References: CVE-2019-0708, URL-https://msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0708, URL-https://zerosum0x0.blogspot.com/2019/05/avoiding-dos-how-bluekeep-scanners-work.html

Description:
This module checks a range of hosts for the CVE-2019-0708 vulnerability
          by binding the MS_T120 channel outside of its normal slot and sending
          non-DoS packets which respond differently on patched and vulnerable hosts.
          It can optionally trigger the DoS vulnerability.
Metasploit Module: Identify endpoints speaking the Remote Desktop Protocol (RDP)
Type: auxiliary
Path: modules/auxiliary/scanner/rdp/rdp_scanner.rb
Authors: Jon Hart <jon_hart[at]rapid7.com>
References: URL-https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-rdpbcgr/5073f4ed-1e93-45e1-b039-6e30c385867c

Description:
This module attempts to connect to the specified Remote Desktop Protocol port
          and determines if it speaks RDP.

          When available, the Credential Security Support Provider (CredSSP) protocol will be used to identify the
          version of Windows on which the server is running. Enabling the DETECT_NLA option will cause a second
          connection to be made to the server to identify if Network Level Authentication (NLA) is required.
Metasploit Module: MS12-020 Microsoft Remote Desktop Checker
Type: auxiliary
Path: modules/auxiliary/scanner/rdp/ms12_020_check.rb
References: CVE-2012-0002, MSB-MS12-020, URL-https://docs.microsoft.com/en-us/security-updates/SecurityBulletins/2012/ms12-020, EDB-18606, URL-https://svn.nmap.org/nmap/scripts/rdp-vuln-ms12-020.nse

Description:
This module checks a range of hosts for the MS12-020 vulnerability.
          This does not cause a DoS on the target.
Metasploit Module: MongoDB Login Utility
Type: auxiliary
Path: modules/auxiliary/scanner/mongodb/mongodb_login.rb
References: URL-https://docs.mongodb.com/manual/reference/mongodb-wire-protocol/, URL-https://github.com/mongodb/specifications/blob/master/source/auth/auth.rst/

Description:
This module attempts to brute force authentication credentials for MongoDB.
          Note that, by default, MongoDB does not require authentication.
Metasploit Module: MongoDB Memory Disclosure (CVE-2025-14847) - Mongobleed
Type: auxiliary
Path: modules/auxiliary/scanner/mongodb/cve_2025_14847_mongobleed.rb
Disclosure date: 2025-12-19
References: CVE-2025-14847, URL-https://www.wiz.io/blog/mongobleed-cve-2025-14847-exploited-in-the-wild-mongodb, URL-https://jira.mongodb.org/browse/SERVER-115508, URL-https://x.com/dez_

Description:
This module exploits a memory disclosure vulnerability in MongoDB's zlib
          decompression handling (CVE-2025-14847). By sending crafted OP_COMPRESSED
          messages with inflated BSON document lengths, the server reads beyond the
          decompressed buffer and returns leaked memory contents in error messages.

          The vulnerability allows unauthenticated remote attackers to leak server
          memory which may contain sensitive information such as credentials, session
          tokens, encryption keys, or other application data.
Metasploit Module: SAP Management Console getStartProfile
Type: auxiliary
Path: modules/auxiliary/scanner/sap/sap_mgmt_con_startprofile.rb
References: URL-https://blog.c22.cc

Description:
This module simply attempts to access the SAP startup profile
        through the SAP Management Console SOAP Interface.
Metasploit Module: SAP Management Console Instance Properties
Type: auxiliary
Path: modules/auxiliary/scanner/sap/sap_mgmt_con_instanceproperties.rb
References: URL-https://blog.c22.cc

Description:
This module simply attempts to identify the instance properties
        through the SAP Management Console SOAP Interface.
Metasploit Module: SAP Management Console getEnvironment
Type: auxiliary
Path: modules/auxiliary/scanner/sap/sap_mgmt_con_getenv.rb
References: URL-https://blog.c22.cc

Description:
This module simply attempts to identify SAP Environment
        settings through the SAP Management Console SOAP Interface.
Metasploit Module: SAP Management Console List Logfiles
Type: auxiliary
Path: modules/auxiliary/scanner/sap/sap_mgmt_con_listlogfiles.rb
References: URL-https://blog.c22.cc

Description:
This module simply attempts to output a list of available
        logfiles and developer tracefiles through the SAP Management
        Console SOAP Interface.
Metasploit Module: SAP URL Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/sap/sap_icm_urlscan.rb
References: CVE-2010-0738

Description:
This module scans for commonly found SAP Internet Communication Manager URLs
          and outputs return codes for the user.
Metasploit Module: SAP Management Console Extract Users
Type: auxiliary
Path: modules/auxiliary/scanner/sap/sap_mgmt_con_extractusers.rb
References: URL-https://blog.c22.cc

Description:
This module simply attempts to extract SAP users from the ABAP
        Syslog through the SAP Management Console SOAP Interface.
Metasploit Module: SAP /sap/bc/soap/rfc SOAP Service SXPG_COMMAND_EXEC Function Command Injection
Type: auxiliary
Path: modules/auxiliary/scanner/sap/sap_soap_rfc_dbmcli_sxpg_command_exec.rb
References: URL-https://labs.f-secure.com/tools/sap-metasploit-modules/, URL-https://labs.f-secure.com/archive/sap-parameter-injection/

Description:
This module makes use of the SXPG_COMMAND_EXEC Remote Function Call, through the
        use of the /sap/bc/soap/rfc SOAP service, to inject and execute OS commands.
Metasploit Module: SAP /sap/bc/soap/rfc SOAP Service BAPI_USER_CREATE1 Function User Creation
Type: auxiliary
Path: modules/auxiliary/scanner/sap/sap_soap_bapi_user_create1.rb
References: URL-https://labs.f-secure.com/tools/sap-metasploit-modules/

Description:
This module makes use of the BAPI_USER_CREATE1 function, through the SOAP
        /sap/bc/soap/rfc service, for creating/modifying users on a SAP.
Metasploit Module: SAP /sap/bc/soap/rfc SOAP Service SXPG_CALL_SYSTEM Function Command Execution
Type: auxiliary
Path: modules/auxiliary/scanner/sap/sap_soap_rfc_sxpg_call_system_exec.rb
References: URL-https://labs.f-secure.com/tools/sap-metasploit-modules/

Description:
This module makes use of the SXPG_CALL_SYSTEM Remote Function Call, through the
        use of the /sap/bc/soap/rfc SOAP service to execute OS commands as configured in
        the SM69 transaction.
Metasploit Module: SAP SOAP RFC RZL_READ_DIR_LOCAL Directory Contents Listing
Type: auxiliary
Path: modules/auxiliary/scanner/sap/sap_soap_rfc_rzl_read_dir.rb
References: OSVDB-92732, URL-http://erpscan.com/advisories/dsecrg-12-026-sap-netweaver-rzl_read_dir_local-missing-authorization-check-and-smb-relay-vulnerability/

Description:
This module exploits the SAP NetWeaver RZL_READ_DIR_LOCAL function, on the SAP
        SOAP RFC Service, to enumerate directory contents. It returns only the first 32
        characters of the filename since they are truncated. The module can also be used to
        capture SMB hashes by using a fake SMB share as DIR.
Metasploit Module: SAP Management Console ABAP Syslog Disclosure
Type: auxiliary
Path: modules/auxiliary/scanner/sap/sap_mgmt_con_abaplog.rb
References: URL-https://blog.c22.cc

Description:
This module simply attempts to extract the ABAP syslog through the SAP Management Console SOAP Interface.
Metasploit Module: SAP SOAP RFC PFL_CHECK_OS_FILE_EXISTENCE File Existence Check
Type: auxiliary
Path: modules/auxiliary/scanner/sap/sap_soap_rfc_pfl_check_os_file_existence.rb
References: OSVDB-78537, BID-51645, URL-http://erpscan.com/advisories/dsecrg-12-009-sap-netweaver-pfl_check_os_file_existence-missing-authorisation-check-and-smb-relay-vulnerability/

Description:
This module abuses the SAP NetWeaver PFL_CHECK_OS_FILE_EXISTENCE function, on
        the SAP SOAP RFC Service, to check for files existence on the remote file system.
        The module can also be used to capture SMB hashes by using a fake SMB share as
        FILEPATH.
Metasploit Module: SAP Management Console Get Logfile
Type: auxiliary
Path: modules/auxiliary/scanner/sap/sap_mgmt_con_getlogfiles.rb
References: URL-https://blog.c22.cc

Description:
This module simply attempts to download available logfiles and
        developer tracefiles through the SAP Management Console SOAP
        Interface. Please use the sap_mgmt_con_listlogfiles
        extension to view a list of available files.
Metasploit Module: SAP Host Agent Information Disclosure
Type: auxiliary
Path: modules/auxiliary/scanner/sap/sap_hostctrl_getcomputersystem.rb
References: CVE-2013-3319, OSVDB-95616, BID-61402, URL-https://launchpad.support.sap.com/#/notes/1816536, URL-https://labs.integrity.pt/advisories/cve-2013-3319/

Description:
This module attempts to retrieve computer and operating system
        information from Host Agent through the SAP HostControl service.
Metasploit Module: SAP Management Console GetProcessList
Type: auxiliary
Path: modules/auxiliary/scanner/sap/sap_mgmt_con_getprocesslist.rb
References: URL-https://blog.c22.cc

Description:
This module attempts to list SAP processes through the SAP Management Console SOAP Interface
Metasploit Module: SAPRouter Admin Request
Type: auxiliary
Path: modules/auxiliary/scanner/sap/sap_router_info_request.rb
References: URL-https://labs.f-secure.com/tools/sap-metasploit-modules/, URL-https://web.archive.org/web/[PII_REDACTED]4105/http://help.sap.com/saphelp_nw70ehp3/helpdata/en/48/6c68b01d5a350ce10000000a42189d/content.htm, URL-http://conference.hitb.org/hitbsecconf2010ams/materials/D2T2%20-%20Mariano%20Nunez%20Di%20Croce%20-%20SAProuter%20.pdf

Description:
Display the remote connection table from a SAPRouter.
Metasploit Module: SAP /sap/bc/soap/rfc SOAP Service SUSR_RFC_USER_INTERFACE Function User Creation
Type: auxiliary
Path: modules/auxiliary/scanner/sap/sap_soap_rfc_susr_rfc_user_interface.rb
References: URL-https://labs.f-secure.com/tools/sap-metasploit-modules/

Description:
This module makes use of the SUSR_RFC_USER_INTERFACE function, through the SOAP
        /sap/bc/soap/rfc service, for creating/modifying users on a SAP.
Metasploit Module: SAPRouter Port Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/sap/sap_router_portscanner.rb
References: URL-https://web.archive.org/web/[PII_REDACTED]4105/http://help.sap.com/saphelp_nw70ehp3/helpdata/en/48/6c68b01d5a350ce10000000a42189d/content.htm, URL-https://web.archive.org/web/[PII_REDACTED]5950/http://help.sap.com/saphelp_dimp50/helpdata/En/f8/bb960899d743378ccb8372215bb767/content.htm, URL-https://labs.f-secure.com/archive/sap-smashing-internet-windows/, URL-http://conference.hitb.org/hitbsecconf2010ams/materials/D2T2%20-%20Mariano%20Nunez%20Di%20Croce%20-%20SAProuter%20.pdf, URL-https://archive.sap.com/documents/docs/DOC-17124

Description:
This module maps ACLs and identifies open/closed ports accessible
        on hosts through a saprouter.
Metasploit Module: SAP /sap/bc/soap/rfc SOAP Service TH_SAPREL Function Information Disclosure
Type: auxiliary
Path: modules/auxiliary/scanner/sap/sap_soap_th_saprel_disclosure.rb
References: URL-https://labs.f-secure.com/tools/sap-metasploit-modules/

Description:
This module attempts to identify software, OS and DB versions through the SAP
        function TH_SAPREL using the /sap/bc/soap/rfc SOAP service.
Metasploit Module: SAP Management Console List Config Files
Type: auxiliary
Path: modules/auxiliary/scanner/sap/sap_mgmt_con_listconfigfiles.rb
References: URL-https://blog.c22.cc

Description:
This module attempts to list the config files
          through the SAP Management Console SOAP Interface.
          Returns a list of config files found in the SAP configuration with its
          absolute paths inside the server filesystem.
Metasploit Module: SAP /sap/bc/soap/rfc SOAP Service SXPG_CALL_SYSTEM Function Command Injection
Type: auxiliary
Path: modules/auxiliary/scanner/sap/sap_soap_rfc_dbmcli_sxpg_call_system_command_exec.rb
References: URL-https://labs.f-secure.com/tools/sap-metasploit-modules/, URL-https://labs.f-secure.com/archive/sap-parameter-injection/

Description:
This module makes use of the SXPG_CALL_SYSTEM Remote Function Call, through the
        use of the /sap/bc/soap/rfc SOAP service, to inject and execute OS commands.
Metasploit Module: SAP /sap/bc/soap/rfc SOAP Service RFC_SYSTEM_INFO Function Sensitive Information Gathering
Type: auxiliary
Path: modules/auxiliary/scanner/sap/sap_soap_rfc_system_info.rb
References: CVE-2006-6010, URL-https://labs.f-secure.com/tools/sap-metasploit-modules/

Description:
This module makes use of the RFC_SYSTEM_INFO Function to obtain the operating
        system version, SAP version, IP address and other information through the use of
        the /sap/bc/soap/rfc SOAP service.
Metasploit Module: SAP Management Console Brute Force
Type: auxiliary
Path: modules/auxiliary/scanner/sap/sap_mgmt_con_brute_login.rb
References: URL-https://blog.c22.cc

Description:
This module simply attempts to brute force the username and
        password for the SAP Management Console SOAP Interface. If
        the SAP_SID value is set it will replace instances of <SAPSID>
        in any user/pass from any wordlist.
Metasploit Module: SAP /sap/bc/soap/rfc SOAP Service RFC_PING Function Service Discovery
Type: auxiliary
Path: modules/auxiliary/scanner/sap/sap_soap_rfc_ping.rb
References: URL-https://labs.f-secure.com/tools/sap-metasploit-modules/

Description:
This module makes use of the RFC_PING function, through the	/sap/bc/soap/rfc
        SOAP service, to test connectivity to remote RFC destinations.
Metasploit Module: SAP SOAP RFC SXPG_COMMAND_EXECUTE
Type: auxiliary
Path: modules/auxiliary/scanner/sap/sap_soap_rfc_sxpg_command_exec.rb
References: URL-https://labs.f-secure.com/tools/sap-metasploit-modules/

Description:
This module makes use of the SXPG_COMMAND_EXECUTE Remote Function Call, through
        the use of the /sap/bc/soap/rfc SOAP service to execute OS commands as configured
        in the SM69 transaction.
Metasploit Module: SAP CTC Service Verb Tampering User Management
Type: auxiliary
Path: modules/auxiliary/scanner/sap/sap_ctc_verb_tampering_user_mgmt.rb
References: URL-http://erpscan.com/advisories/dsecrg-11-041-sap-netweaver-authentication-bypass-verb-tampering/, URL-http://erpscan.com/wp-content/uploads/2012/11/Breaking-SAP-Portal-HackerHalted-2012.pdf

Description:
This module exploits an authentication bypass vulnerability in SAP NetWeaver
        CTC service. The service is vulnerable to verb tampering allowing for unauthorised
        OS user management. Information about resolution should be available at SAP notes
        1589525 and 1624450 (authentication required).
Metasploit Module: SAP /sap/bc/soap/rfc SOAP Service RFC_READ_TABLE Function Dump Data
Type: auxiliary
Path: modules/auxiliary/scanner/sap/sap_soap_rfc_read_table.rb
References: URL-https://labs.f-secure.com/tools/sap-metasploit-modules/

Description:
This module uses the RFC_READ_TABLE function to read data from tables using
        the /sap/bc/soap/rfc SOAP service.
Metasploit Module: SAP Management Console Version Detection
Type: auxiliary
Path: modules/auxiliary/scanner/sap/sap_mgmt_con_version.rb
References: URL-https://blog.c22.cc

Description:
This module simply attempts to identify the version of SAP
        through the SAP Management Console SOAP Interface.
Metasploit Module: SAP Management Console Get Process Parameters
Type: auxiliary
Path: modules/auxiliary/scanner/sap/sap_mgmt_con_getprocessparameter.rb
References: URL-https://blog.c22.cc

Description:
This module simply attempts to output a SAP process parameters and
        configuration settings through the SAP Management Console SOAP Interface.
Metasploit Module: SAP ICF /sap/public/info Service Sensitive Information Gathering
Type: auxiliary
Path: modules/auxiliary/scanner/sap/sap_icf_public_info.rb

Description:
This module uses the /sap/public/info service within SAP Internet Communication
        Framework (ICF) to obtain the operating system version, SAP version, IP address
        and other information.
Metasploit Module: SAP Management Console Get Access Points
Type: auxiliary
Path: modules/auxiliary/scanner/sap/sap_mgmt_con_getaccesspoints.rb
References: URL-https://blog.c22.cc

Description:
This module simply attempts to output a list of SAP access points through the
        SAP Management Console SOAP Interface.
Metasploit Module: SAP SOAP RFC EPS_GET_DIRECTORY_LISTING Directories Information Disclosure
Type: auxiliary
Path: modules/auxiliary/scanner/sap/sap_soap_rfc_eps_get_directory_listing.rb
References: URL-https://labs.f-secure.com/

Description:
This module abuses the SAP NetWeaver EPS_GET_DIRECTORY_LISTING function, on the
        SAP SOAP RFC Service, to check for remote directory existence and get the number
        of entries on it. The module can also be used to capture SMB hashes by using a fake
        SMB share as DIR.