RCE#

First, somehow login as admin

Then navigate to admin settings (the cog icon on top) -> Tasks -> Create Task

Create a Admin - Execute script task

Fill out the task. Use a groovy reverse shell script from https://www.revshells.com

After creating the task, it will redirect us back to this Tasks page. Click on the task we just created

Run a netcat listener on your side first

rlwrap nc -nvlp 9001

Finally, run the task, and you should have the shell on your netcat listener