EIP-2026-107579

This exploit leverages a time-based filename obfuscation weakness in HelpDeskZ v1.0.2 to achieve unauthenticated remote code execution by brute-forcing the MD5 hash of the uploaded PHP shell filename. The script automates the discovery of the uploaded shell by guessing the server's timestamp.