> For the complete documentation index, see [llms.txt](https://kashz.gitbook.io/kashz-jewels/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://kashz.gitbook.io/kashz-jewels/services/raspap.md).

# raspAP

<https://checkmarx.com/blog/chained-raspap-vulnerabilities-grant-root-level-access/>

## Default Creds

```
admin:secret
```

## Version check (Authenticated)

```
# version check > About RaspAP
http://IP:PORT/index.php?page=about
```

## Interesting Paths

```
/includes/config.php
```

## webconsole

```bash
# Dashboard > System > Console
/includes/webconsole.php
```