# RestStack API 3100

![](https://3418038199-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FyTPWZkKJbJfX8uHiRzmn%2Fuploads%2Fx5fVSOtWNukH66bqUaAz%2Fimage.png?alt=media\&token=60a43cb7-9a48-450f-8602-36d3e96a7f22)

After properly enumerating the website I came across a version of the API running on port 8000.&#x20;

{% embed url="https://github.com/jasperla/CVE-2020-11651-poc" %}

{% embed url="https://www.exploit-db.com/exploits/48421" %}

![](https://3418038199-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FyTPWZkKJbJfX8uHiRzmn%2Fuploads%2FVQLxzkQOYDBDb2UTtnNl%2F2022-08-09_12-55.png?alt=media\&token=65bc1cb0-52dc-4d5c-afc8-298547837a55)

You could also generate a new passwd user and insert it into the passwd file.&#x20;
