In Every Penetration testing engagement we start with recon, thereby we start by scanning the target for open ports.

I tried the full scan and found two open ports :

SSH = 22
Webmin = 10000

after that lets do a service scan for this port to see what service is running :

nmap -sC -sV -p 10000 10.10.14.207 -oA servicewebmin

if we look closer we can find that port 10000 has Webmin httpd, it’s version is 1.890 which seems vulnerable to a known exploit.

lets search with searchsploit to see if the exploit is available in exploitdb.

We can clearly find that there is an exploit for this version, lets use metasploit get a shell on the box.

Thanks for Reading Everyone & Stay Tuned for the next Writeups.