> For the complete documentation index, see [llms.txt](https://pnpt.adot8.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://pnpt.adot8.com/external-pentest-playbook/wreath-try-hack-me/enumeration/10000.md).

# 10000

```
10000/tcp open   http       MiniServ 1.890 (Webmin httpd)
|_http-title: Site doesn't have a title (text/html; Charset=iso-8859-1).
| http-methods: 
|_  Supported Methods: GET HEAD POST OPTIONS
|_http-favicon: Unknown favicon MD5: FEECEDA60440F51CE9A184164C935677
```

<figure><img src="/files/i4rnrpNfDy6iSJCjYqZ5" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/P96uuqQWA2gx7XOiyEYx" alt=""><figcaption></figcaption></figure>

## Possible exploits

* <https://github.com/foxsin34/WebMin-1.890-Exploit-unauthorized-RCE>
* <https://github.com/n0obit4/Webmin_1.890-POC.git>

## Password sprays

* root:root
* APC:APC
* admin:admin
* administrator:Password