> For the complete documentation index, see [llms.txt](https://kashz.gitbook.io/kashz-jewels/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://kashz.gitbook.io/kashz-jewels/services/xampp.md).

# xampp

## Interesting Paths

```bash
# config file (win)
\xampp\phpMyAdmin\config.inc.php

# default-passwords file (win)
\xampp\passwords.txt

# phpinfo
/xampp/phpinfo.php

# status of different services
/xampp/status.php
```

## XAMP for Windows 1.8.1

* webDAV RCE | <https://github.com/ruthvikvegunta/XAMPP-WebDAV-Exploit>
* file write | <https://www.exploit-db.com/exploits/28654>