add default username/passwords for IBM Cognos Express Tomcat Manager

git-svn-id: file:///home/svn/framework3/trunk@8368 4d416f70-5f16-0410-b530-b9f4589650da

data/wordlists/tomcat_mgr_default_userpass.txt

@@ -1,2 +1,3 @@
 j2deployer j2deployer
 ovwebusr OvW*busr1
+cxsdk kdsxc

data/wordlists/tomcat_mgr_default_users.txt

@@ -1,5 +1,6 @@
 admin
 manager
-rol1
+role1
 root
 tomcat
+both

modules/auxiliary/scanner/http/tomcat_mgr_login.rb

@@ -28,7 +28,14 @@ class Metasploit3 < Msf::Auxiliary
 			'Description'    => 'This module simply attempts to login to a Tomcat Application Manager instance using a specific user/pass.',
 			'References'  =>
 				[
+					# HP Default user/pass
+					[ 'OSVDB', '60317' ],
 					[ 'CVE', '2009-3843' ],
+					[ 'URL', 'http://www.harmonysecurity.com/blog/2009/11/hp-operations-manager-backdoor-account.html' ],
+					# IBM Cognos Express Default user/pass
+					[ 'BID', '38084' ],
+					[ 'URL', 'http://www-01.ibm.com/support/docview.wss?uid=swg21419179' ],
+					# General
 					[ 'URL', 'http://tomcat.apache.org/' ]
 				],
 			'Author'         => [ 'MC', 'Matteo Cantoni <goony[at]nothink.org>', 'jduck' ],