Skip to content

Commit ad43f94

Browse files
committed
added scenarios for docs
1 parent dd9599c commit ad43f94

File tree

1 file changed

+87
-2
lines changed

1 file changed

+87
-2
lines changed

documentation/modules/auxiliary/scanner/http/tomcat_mgr_login.md

Lines changed: 87 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,8 @@
1-
The auxiliary/scanner/http/tomcat_mgr_login works for Tomcat versions that uses HTTP
1+
The `auxiliary/scanner/http/tomcat_mgr_login` works for Tomcat versions that uses HTTP
22
authentication.
33

44
Please note that for Tomcat 7 or newer, the roles required to use the manager application were
5-
changed from the single manager role to the following four roles:
5+
changed from the single `manager` role to the following four roles:
66

77
* manager-gui - Allows access to the HTML GUI and the status pages.
88
* manager-script - Allows access to the text interface and the status pages.
@@ -39,3 +39,88 @@ To download the vulnerable application, you can find it here: https://tomcat.apa
3939
2. Do: ```set RHOSTS [IP]```
4040
3. Set TARGETURI if necessary.
4141
4. Do: ```run```
42+
43+
## Scenarios
44+
45+
All scenarios are run with the credentials tomcat/tomcat.
46+
47+
### Tomcat 6
48+
49+
Tomcat 6.0.48 running on Ubuntu 14.04
50+
51+
```
52+
msf > use auxiliary/scanner/http/tomcat_mgr_login
53+
msf auxiliary(tomcat_mgr_login) > set rport 8080
54+
rport => 8080
55+
msf auxiliary(tomcat_mgr_login) > set rhosts 192.168.2.156
56+
rhosts => 192.168.2.156
57+
msf auxiliary(tomcat_mgr_login) > run
58+
59+
[!] No active DB -- Credential data will not be saved!
60+
[-] 192.168.2.156:8080 - LOGIN FAILED: admin:admin (Incorrect)
61+
```
62+
...snip...
63+
```
64+
[-] 192.168.2.156:8080 - LOGIN FAILED: tomcat:root (Incorrect)
65+
[+] 192.168.2.156:8080 - LOGIN SUCCESSFUL: tomcat:tomcat
66+
[-] 192.168.2.156:8080 - LOGIN FAILED: both:admin (Incorrect)
67+
```
68+
...snip...
69+
```
70+
[*] Scanned 1 of 1 hosts (100% complete)
71+
[*] Auxiliary module execution completed
72+
```
73+
74+
### Tomcat 7
75+
76+
Tomcat 7.0.68 running on Windows XP
77+
78+
```
79+
msf > use auxiliary/scanner/http/tomcat_mgr_login
80+
msf auxiliary(tomcat_mgr_login) > set rport 8087
81+
rport => 8087
82+
msf auxiliary(tomcat_mgr_login) > set rhosts 192.168.2.108
83+
rhosts => 192.168.2.108
84+
msf auxiliary(tomcat_mgr_login) > run
85+
86+
[!] No active DB -- Credential data will not be saved!
87+
[-] 192.168.2.108:8087 - LOGIN FAILED: admin:admin (Incorrect)
88+
```
89+
...snip...
90+
```
91+
[-] 192.168.2.108:8087 - LOGIN FAILED: tomcat:root (Incorrect)
92+
[+] 192.168.2.108:8087 - LOGIN SUCCESSFUL: tomcat:tomcat
93+
[-] 192.168.2.108:8087 - LOGIN FAILED: both:admin (Incorrect)
94+
```
95+
...snip...
96+
```
97+
[*] Scanned 1 of 1 hosts (100% complete)
98+
[*] Auxiliary module execution completed
99+
```
100+
101+
### Tomcat 8
102+
103+
Tomcat 8.0.32 unning on Windows XP
104+
105+
```
106+
msf > use auxiliary/scanner/http/tomcat_mgr_login
107+
msf auxiliary(tomcat_mgr_login) > set rhosts 192.168.2.108
108+
rhosts => 192.168.2.108
109+
msf auxiliary(tomcat_mgr_login) > set rport 8088
110+
rport => 8088
111+
msf auxiliary(tomcat_mgr_login) > run
112+
113+
[!] No active DB -- Credential data will not be saved!
114+
[-] 192.168.2.108:8088 - LOGIN FAILED: admin:admin (Incorrect)
115+
```
116+
...snip...
117+
```
118+
[-] 192.168.2.108:8088 - LOGIN FAILED: tomcat:root (Incorrect)
119+
[+] 192.168.2.108:8088 - LOGIN SUCCESSFUL: tomcat:tomcat
120+
[-] 192.168.2.108:8088 - LOGIN FAILED: both:admin (Incorrect)
121+
```
122+
...snip...
123+
```
124+
[*] Scanned 1 of 1 hosts (100% complete)
125+
[*] Auxiliary module execution completed
126+
```

0 commit comments

Comments
 (0)