Based on ManageEngine Exchange Reporter Plus Unauthenticated Remote Code Execution exploit.
Subscribe: https://www.youtube.com/c/KacperSzurekEN?sub_confirmation=1

Exploit: https://github.com/kacperszurek/exploits/blob/master/ManageEngineExchangeReporterPlus/manageengine_adshacluster_rce.rb

Vulnerable app to download: https://mega.nz/#!XG5CTC5I!IuG91CbrcdcpQj4teYRiBWNwy9pULRkV69U3DQ6nCyU

My website: https://security.szurek.pl/

Twitter: https://twitter.com/kacperszurek

GitHub: https://github.com/kacperszurek/

Icon made by Freepik, Smashicons from www.flaticon.com

source