Update payloads and attack type

http/default-logins/apache/tomcat-default-login.yaml

@@ -2,11 +2,12 @@ id: tomcat-default-login
 
 info:
   name: Apache Tomcat Manager Default Login
-  author: pdteam,sinKettu
+  author: pdteam,sinKettu,nybble04
   severity: high
   description: Apache Tomcat Manager default login credentials were discovered. This template checks for multiple variations.
   reference:
     - https://www.rapid7.com/db/vulnerabilities/apache-tomcat-default-ovwebusr-password/
+    - https://github.com/danielmiessler/SecLists/blob/master/Passwords/Default-Credentials/tomcat-betterdefaultpasslist.txt
   metadata:
     max-request: 18
     shodan-query: title:"Apache Tomcat"
@@ -21,46 +22,52 @@ http:
 
     payloads:
       username:
-        - tomcat
-        - admin
-        - ovwebusr
-        - j2deployer
-        - cxsdk
         - ADMIN
-        - xampp
-        - tomcat
         - QCC
         - admin
-        - root
-        - role1
-        - role
-        - tomcat
-        - admin
-        - role1
         - both
-        - admin
+        - cxsdk
+        - demo
+        - j2deployer
+        - manager
+        - ovwebusr
+        - role
+        - role1
+        - root
+        - server_admin
+        - tomcat
+        - xampp
 
       password:
-        - tomcat
+        - ADMIN
-        - admin
         - OvW*busr1
+        - Password1
+        - QLogic66
+        - admanager
+        - admin
+        - adrole1
+        - adroot
+        - ads3cret
+        - adtomcat
+        - advagrant
+        - changethis
+        - demo
         - j2deployer
         - kdsxc
-        - ADMIN
+        - manager
-        - xampp
+        - owaspbwa
-        - s3cret
+        - password
-        - QLogic66
+        - password1
-        - tomcat
+        - r00t
-        - root
         - role1
-        - changethis
+        - root
-        - changethis
+        - s3cret
-        - j5Brn9
         - tomcat
-        - tomcat
+        - toor
-        - 123456
+        - vagrant
+        - xampp
 
-    attack: pitchfork  # Available options: sniper, pitchfork and clusterbomb
+    attack: clusterbomb  # Available options: sniper, pitchfork and clusterbomb
 
     matchers-condition: and
     matchers: