Exploit for Use of Hard-coded Credentials in Solarwinds Web_Help_Desk CVE-2024-28987

Name: Exploit for Use of Hard-coded Credentials in Solarwinds Web_Help_Desk CVE-2024-28987
Rating: 5 (11 reviews)
2026-07-28 | CVSS 9.1
## https://sploitus.com/exploit?id=F6E76990-B26D-5FA7-80E1-AE787AA70B61
# CVE-2024-28987 - SolarWinds Web Help Desk Hardcoded Credentials Exploit

[![Python](https://img.shields.io/badge/Python-3.6+-blue.svg)](https://www.python.org/downloads/)
[![License](https://img.shields.io/badge/License-MIT-green.svg)](LICENSE)
[![CVE](https://img.shields.io/badge/CVE-2024--28987-red.svg)](https://nvd.nist.gov/vuln/detail/CVE-2024-28987)
[![CVSS](https://img.shields.io/badge/CVSS-9.1-critical.svg)](https://nvd.nist.gov/vuln/detail/CVE-2024-28987)

> **⚠️ DISCLAIMER:** This tool is for **educational and authorized security testing purposes only**. Unauthorized access to computer systems is illegal. Use this tool only on systems you own or have explicit permission to test.

---

## 📋 Overview

**CVE-2024-28987** is a critical vulnerability in SolarWinds Web Help Desk (WHD) that allows remote attackers to access sensitive ticket information using **hardcoded credentials**. This vulnerability has a **CVSS score of 9.1 (Critical)** and is actively being exploited in the wild.

### Vulnerability Details

| Attribute | Value |
|-----------|-------|
| **CVE ID** | CVE-2024-28987 |
| **CVSS Score** | 9.1 (Critical) |
| **CWE** | CWE-798 (Hardcoded Credentials) |
| **Affected Products** | SolarWinds Web Help Desk ≤ 12.8.3 Hotfix 1 |
| **Patched Version** | 12.8.3 Hotfix 2 |
| **Exploitation** | Actively exploited in the wild |
| **Added to CISA KEV** | October 15, 2024 |

### Impact

An unauthenticated attacker can:
- Access all support tickets containing sensitive information
- View temporary passwords, reset requests, and shared service credentials
- Perform CRUD operations on tickets via `/OrionTickets` endpoint
- Potentially pivot to other systems in the network

---

## 🔧 Features

- ✅ **Automatic vulnerability detection** - Tests for hardcoded credentials
- ✅ **Ticket extraction** - Retrieves all tickets from vulnerable systems
- ✅ **Sensitive data scanning** - Identifies passwords, credentials, PII, and medical data
- ✅ **Multiple output formats** - JSON and JSONL for large datasets
- ✅ **Interactive preview** - Shows first 3 tickets before extraction
- ✅ **Zero dependencies** - Uses only Python standard library
- ✅ **Colorful output** - Enhanced readability with ANSI colors
- ✅ **Error handling** - Graceful handling of connection errors

---

## 🚀 Quick Start

### Prerequisites

- Python 3.6 or higher
- No external dependencies required!

### Installation

```bash
# Clone the repository
git clone https://github.com/Darabium/CVE-2024-28987.git
cd CVE-2024-28987

# Make the script executable