Postman

[beefsprocket]

Another hint - you don’t need metasploit for a foothold. Just look at the CONFIG for the service you find and then look for ways to manipulate it.