finding

Focus areas

Weak or null authentication
Default credentials: admin:changeme

Footprint

Discover the Splunk with nmap scan

Enumeration

The Splunk enterprises trial converts to a free version after 60 days, which does not require authentication.

Remote code execution

Server-side Django
REST endpoint
Scripted inputs
Alerting scripts