Listing of SAP Open Ports: A Comprehensive Guide

/usr/sap/<SID>/D00/exe/sapcontrol -nr <instance num> -function GetAccessPointList

GetAccessPointList
OK
address, port, protocol, processname, active
127.0.0.1, 50113, HTTP, sapstartsrv, Yes
192.168.1.130, 50113, HTTP, sapstartsrv, Yes
127.0.0.1, 50114, HTTPS, sapstartsrv, Yes
192.168.1.130, 50114, HTTPS, sapstartsrv, Yes
127.0.0.1, 3201, ENQ, enserver, Yes
192.168.1.130, 3201, ENQ, enserver, Yes
127.0.0.1, 3901, MS, msg_server, Yes
192.168.1.130, 3901, MS, msg_server, Yes
127.0.0.1, 3601, MS, msg_server, Yes
192.168.1.130, 3601, MS, msg_server, Yes
127.0.0.1, 8101, HTTP, msg_server, Yes
192.168.1.130, 8101, HTTP, msg_server, Yes

import socket
import re
from concurrent.futures import ThreadPoolExecutor
from tabulate import tabulate

# IP address of the remote computer to be scanned
TARGET_IP = "192.168.1.130"

# SAP Port Definitions
ports = {
    "ABAP AS": {
        "Dispatcher": "32NN",
        "Gateway":    "33NN",
        "Gateway2":   "48NN",
        "ICM HTTP":   ["80NN", "80"],
        "ICM HTTP":   ["84NN", "8443"],
        "ICM HTTPS": ["443NN", "443"],
        "ICM SMTP":     "25",
        "ICM Admin": "650NN",
        "Message Server": ["36NN", "39NN"],
        "Message Server HTTP": "81NN",
        "Message Server HTTPS": "444NN",
        "Central System Log *UDP*": ["12NN", "13NN", "14NN", "15NN"],
    },
    "Admin Services": {
        "SAPHostControl": "1128",
        "SAPHostControl SSL": "1129",
        "Start Service": "5NN13",
        "Start Service SSL": "5NN14",
        "SDM": ["5NN17", "5NN18", "5NN19"],
        "SAP Router": "3299",
        "NIping": "3298",
        "SAPlpd": "515",
        "DTR": "5NN15",
        "IGS HTTP": "4NN80"
    },
    "HANA": {
        "SQL indexserver": "3NN15",
        "XS HTTP": "80NN",
        "XS HTTPS": "43NN",
    },
}

# Port expansion function
def expand_ports(port_rule, maxi=100):
    port_re = r"(\w+)(NN)(\w+)?"
    port_list = re.split(port_re, port_rule)
    port_list = [e for e in port_list if e not in ["", None]]

    if len(port_list) > 1:
        temp_list = []
        for i in range(maxi):
            port = "".join(port_list)
            temp_list.append(port.replace("NN", f"{i:02}"))
        return temp_list
    else:
        return port_list

# function of port scanning
def scan_port(ip, port):
    try:
        with socket.create_connection((ip, int(port)), timeout=1):
            return True
    except (socket.timeout, socket.error):
        return False

# main function
def main():
    # create ports to scan
    port_details = []
    for category, protocols in ports.items():
        for protocol, port_rule in protocols.items():
            if isinstance(port_rule, list):
                for rule in port_rule:
                    expanded_ports = expand_ports(rule)
                    port_details += [(category, protocol, port) for port in expanded_ports]
            else:
                expanded_ports = expand_ports(port_rule)
                port_details += [(category, protocol, port) for port in expanded_ports]

    # Make ports unique
    port_details = sorted(set(port_details), key=lambda x: int(x[2]))

    # Start scan
    print(f"Taranacak IP: {TARGET_IP}\n")
    active_ports = []
    with ThreadPoolExecutor(max_workers=50) as executor:
        futures = {executor.submit(scan_port, TARGET_IP, detail[2]): detail for detail in port_details}
        for future in futures:
            category, protocol, port = futures[future]
            if future.result():  # Sadece aktif portları ekle
                active_ports.append([category, protocol, port])

    # write the actie port as table
    if active_ports:
        headers = ["Category", "Protocol", "Port"]
        print(tabulate(active_ports, headers=headers, tablefmt="grid"))
    else:
        print("Hiçbir aktif port bulunamadı.")

if __name__ == "__main__":
    main()