> For the complete documentation index, see [llms.txt](https://kashz.gitbook.io/kashz-jewels/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://kashz.gitbook.io/kashz-jewels/services/manage-engine-applications-manager.md).

# manage engine applications manager

## Default Creds

```
admin:admin
```

## Authenticated RCE

Applications Manager (Build No:14700)

```bash
# use port 443
https://www.exploit-db.mkcom/exploits/48793

# manual
Login > Admin > Upload Files / Binaries 
jar based reverse shell / jsp
Select Upload Script to <Product_Home>/working/
Use Execute Program to run it.
# execute program can be used to do other stuff
```