> ## Content Index
> Fetch the complete content index at: https://darkwebinformer.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# CVE-2024-28987 Scanner & Exploiter - SolarWinds Web Help Desk
- URL: https://darkwebinformer.com/cve-2024-28987-scanner-exploiter-solarwinds-web-help-desk/
- Published: 2025-01-07T20:08:00.000Z
- Updated: 2025-09-04T22:24:39.000Z
- Author: Dark Web Informer
- Tags: Tools, Vulnerabilities

---

GitHub: <https://github.com/PlayerFridei/CVE-2024-28987>

---

# CVE-2024-28987 Exploit & Scanner

[](https://github.com/PlayerFridei/CVE-2024-28987#cve-2024-28987-exploit--scanner)

A Python-based exploit and scanner for the **CVE-2024-28987** vulnerability affecting SolarWinds Web Help Desk. This tool enables security researchers to identify and interact with vulnerable endpoints and explore various potential vectors in the Web Help Desk system.

## Features

[](https://github.com/PlayerFridei/CVE-2024-28987#features)

- **Vulnerability Detection**: Test if the target is vulnerable to CVE-2024-28987 by attempting to access the `/OrionTickets` endpoint.
- **Fetch Tickets**: Retrieve and save all helpdesk tickets from the vulnerable endpoint.
- **Experimental Features**:
  - **Create Tickets**: Submit a new helpdesk ticket.
  - **Update Tickets**: Modify existing helpdesk ticket details.
  - **Delete Tickets**: Remove a helpdesk ticket by ID.
- **Colored Terminal Output**: Provides a visually clear interface with status messages in different colors for easy identification.

## Requirements

[](https://github.com/PlayerFridei/CVE-2024-28987#requirements)

- Python 3.x
- `requests`
- **Note**: The script suppresses SSL warnings, as it's intended for use in secure testing environments.

## Installation

[](https://github.com/PlayerFridei/CVE-2024-28987#installation)

1. Clone the repository:git clone https://github.com/PlayerFridei/CVE-2024-28987  
cd CVE-2024-28987
2. Install required Python packages:pip install -r requirements.txt

## Usage

[](https://github.com/PlayerFridei/CVE-2024-28987#usage)python3 exploit.py <target\_ip>

### Example

[](https://github.com/PlayerFridei/CVE-2024-28987#example)python3 exploit.py 192.168.1.100

![](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2025/01/2350909235908203-1.png)

## Menu Options

[](https://github.com/PlayerFridei/CVE-2024-28987#menu-options)

1. **Fetch All Tickets**: Retrieve all helpdesk tickets and save them to `tickets.txt`.
2. **(Experimental) Create a New Ticket**: Add a new helpdesk ticket to the system (may not always succeed).
3. **(Experimental) Update an Existing Ticket**: Modify the subject and details of an existing helpdesk ticket.
4. **(Experimental) Delete a Ticket**: Attempt to delete a helpdesk ticket by providing its ID.
5. **Exit**: Exit the program.

### Notes

[](https://github.com/PlayerFridei/CVE-2024-28987#notes)

- The experimental features (create, update, delete) are provided for testing and exploration, educational and research purposes and may not always function correctly depending on system permissions and configurations.
- The tool is intended for **educational and authorized security testing only**. Always have permission to test and never use on unauthorized systems.

## Banner

[](https://github.com/PlayerFridei/CVE-2024-28987#banner)

The script comes with a custom ASCII banner for a personalized touch when running the tool.

# Disclaimer

[](https://github.com/PlayerFridei/CVE-2024-28987#disclaimer)

> Before using this software, you agree to the terms outlined in our [SECURITY.md](https://github.com/PlayerFridei/CVE-2024-28987/blob/main/SECURITY.md) policy.

## License

[](https://github.com/PlayerFridei/CVE-2024-28987#license)

This project is licensed under the MIT License - see the [LICENSE](https://github.com/PlayerFridei/CVE-2024-28987/blob/main/LICENSE) file for details.