May 2024 – SAP Technology & Security

bash script for the NETCAT connection test to a SAP S/4HANA system

The script is useful for automated monitoring of SAP system connectivity and logging connection events, making it ideal for system administrators to ensure the availability and integrity of their SAP systems. The Bash script checks the connection to a MessageServer of a SAP system instance. Here is a summary of its functionalities:

Connection Test: The script tests the nc connection to a MessageServer of a SAP system instance. It utilizes the check_connection function to perform the connection check.

Logging: The script logs the test results in two files: connectiontest.txt contains all test results, while connectiontest-failed.txt stores only failed connection attempts.

Notification on Connection Failures: In case of a connection failure, the script sends an email notification to the specified email address.

Cleanup of Old Entries: The script deletes old timestamps from the connectiontest.txt log file after 10 days to maintain file cleanliness and save storage space.

Endless Loop for Periodic Testing: The script includes a commented-out endless loop that performs connection tests at regular intervals. This feature can be enabled to continuously monitor the connection. It is recommended to set up a cronjob for this purpose.

Termination of nc Sessions: Upon completion of the script, it terminates all running nc sessions belonging to the current user.

bash script for the NETCAT connection test to a SAP S/4HANA system Read More »

security.txt generator for enterprise

Our security.txt generator according to RFC 9116 is user-friendly and offers a customized creation of the security.txt file. You do not need extensive technical knowledge to benefit from this service. The file is created according to the latest Internet Engineering Task Force (IETF) standards and can contain important information such as contact details, vulnerability reporting guidelines and encryption information where applicable.

This file serves as a direct communication bridge between security researchers and your organization to report vulnerabilities efficiently and securely. Having a clearly defined contact option on your website can be critical to quickly addressing and remediating potential security risks.

When researchers discover vulnerabilities, there is often a lack of appropriate reporting channels. As a result, vulnerabilities may not be reported. This document defines a machine-readable format (“security.txt”) to help organizations describe their vulnerability disclosure practices to make it easier for researchers to report vulnerabilities.