0

I am trying to gain access to a server using CVE-2019-15107 with help of metasploit. I tried to find examples of its usage, but I found none.

My machines ip is 192.168.109.133. I am connected to a vpn where I have access to the target at 192.168.208.32. At port 10000 Webmin is running with version 1.890, which is susceptible to this exploit.

I have set every required option, but it won't work, and I have no idea why.

enter image description here

This is the output after I exploit.

enter image description here

I have basically no idea what SRVHOST and SRVPORT is for. I don't know what TARGETURI is either. So if someone could explain that in more detail for me I would appreciate it.

9
  • You're using a VPN. How does the target route their traffic to your attacking machine? I'm thinking that this is not a security or a metasploit question but a basic networking question. – schroeder Sep 16 '20 at 19:38
  • @schroeder maybe it is some sort of lab VPN where the routing works out. – multithr3at3d Sep 16 '20 at 22:43
  • @multithr3at3d sure, but that's why I asked the question – schroeder Sep 17 '20 at 6:39
  • @schroeder Yes, I am connected to a lab enviorment via VPN. I was able to port scan the machine and find the service Webmin running on port 10000. – Mr Krisey Sep 17 '20 at 12:12
  • 1
    That's not what I asked. Does the target have a route to you? You can get to it, can it get to you? – schroeder Sep 17 '20 at 12:14
1

TARGETURI is explained in the description for that option; it is the URI path to the application. If you open a web browser to the application and the base of the path is e.g. /webmin, that's what you'd use here. Or, maybe there is no prefix and you can just leave it blank.

The presence of SRVHOST and SRVPORT indicates that the target will need to reach out to a server running on your end as part of the exploit. These just set where that listener will bind, so it can probably be left as default as well. If I remember correctly, Metasploit will use the LHOST value to populate the actual address when the target connects back to this server.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.