diff --git a/.gitmodules b/.gitmodules new file mode 100644 index 0000000..01ba308 --- /dev/null +++ b/.gitmodules @@ -0,0 +1,3 @@ +[submodule "expdb"] + path = expdb + url = https://github.com/RndU53r/expdb.git diff --git a/README.md b/README.md index 55eefb2..81c407e 100644 --- a/README.md +++ b/README.md @@ -22,16 +22,36 @@ Demonstrative code snippets and reproducible environments for responsible testin - **Detection & Hardening Tools** Scripts and techniques to aid defenders in identifying vulnerable components, misconfigurations, and implementing mitigations. +- **Exploit Database Mirror (`expdb/`)** +A git submodule pointing to a full [Exploit-DB](https://www.exploit-db.com/) mirror with supplemental third-party CVE collections. Useful for cross-referencing public PoCs during SAP vulnerability research. + All contributions are intended to **educate, empower, and protect** the global SAP ecosystem in line with OWASP’s mission. ## Structure of the Repository ```text SAP-Security-Research/ -├── papers/ # Research documents and presentations -├── CVE-20XX-XXXX/ # Proof-of-Concept exploits, test scripts and descriptive Readme to the CVE. +├── papers/ # Research documents and presentations +├── CVE-20XX-XXXX/ # Proof-of-Concept exploits, test scripts and descriptive Readme to the CVE. +├── expdb/ # Git submodule — Exploit-DB mirror + external CVE sources (see expdb/README.md) └── README.md ``` +### Cloning with submodules + +The `expdb/` directory is a [git submodule](https://git-scm.com/book/en/v2/Git-Tools-Submodules) (~GB-scale). To clone this repository with expdb included: + +```bash +git clone --recurse-submodules https://github.com/SecuritySilverbacks/sap-security-research.git +``` + +If you already cloned without submodules: + +```bash +git submodule update --init --recursive +``` + +Upstream: [RndU53r/expdb](https://github.com/RndU53r/expdb) + ## Contribution To add your own contribution, fork the repo, create your feature branch, and [open a pull request](https://github.com/SecuritySilverbacks/sap-security-research/pulls) — we review all contributions related to SAP vulnerability research, PoCs, and detection techniques. diff --git a/expdb b/expdb new file mode 160000 index 0000000..084f3f2 --- /dev/null +++ b/expdb @@ -0,0 +1 @@ +Subproject commit 084f3f2db5a90a7bdf40a51d281f4138ae47301d