## https://sploitus.com/exploit?id=0EFEFEFC-F3B2-520D-A8D2-5D047037F7EC
PoC exploit for CVE-2020-6287, a vulnerability in SAP NetWeaver AS Java. The exploit targets the CTCWebService component, allowing an unauthenticated attacker to add a user with no administrator permission set. The vulnerability is present in the CTCWebServiceBean?wsdl endpoint, which is accessed via a GET request. The exploit uses a SOAP request to add a new user, specifying the username and password in the payload. The exploit is typically invoked by running the sap-CVE-2020-6287-add-user.py script with the target URL, username, and password as arguments. The expected impact of this exploit is the addition of a new user with no administrator permission set, allowing an attacker to potentially escalate privileges or gain unauthorized access to the system.