Skip to content

Commit fbeba8b

Browse files
committed
Fix rapid7#9513, Add private_type to be able to store password for Tomcat
If there is no :private_type, the create_credential method in Metasploit::Credential::Creation will quietly skip the password, which makes it look like a bug when the user is trying to view the password from the creds command. Fix rapid7#9513
1 parent b21f5d7 commit fbeba8b

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

modules/auxiliary/scanner/http/tomcat_mgr_login.rb

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -120,7 +120,8 @@ def run_host(ip)
120120
credential_data = result.to_h
121121
credential_data.merge!(
122122
module_fullname: self.fullname,
123-
workspace_id: myworkspace_id
123+
workspace_id: myworkspace_id,
124+
private_type: :password
124125
)
125126
if result.success?
126127
credential_core = create_credential(credential_data)

0 commit comments

Comments
 (0)