Cve-2018-19204

Being Stubborn Pays Off pt. 1 – CVE-2018-19204

18 April 2019 ~10 min By Javier Jimenez
Cve Exploit Development Internals Webapps 0day Cve-2018-19204 Exploit Prtg Network Monitor Web Application
Intro During an internal assessment, I came across monitoring software that had default credentials configured. This monitoring software allowed for the creation of sensors, but, none of which would allow for code execution or any other things that could compromise an underlying system. Turns out, it was a vulnerable version based on a publicly known CVE, but there was no public exploit code. Join me in this quest on building an exploit!