tomcat_mgr_deploy may report successful creds
parent
57c22a50fa
commit
937f8f035a
|
@ -128,6 +128,16 @@ class Metasploit3 < Msf::Exploit::Remote
|
||||||
return CheckCode::Unknown
|
return CheckCode::Unknown
|
||||||
end
|
end
|
||||||
|
|
||||||
|
report_auth_info(
|
||||||
|
:host => rhost,
|
||||||
|
:port => rport,
|
||||||
|
:sname => (ssl ? "https" : "http"),
|
||||||
|
:user => user,
|
||||||
|
:pass => pass,
|
||||||
|
:proof => "WEBAPP=\"Tomcat Manager App\", VHOST=#{vhost}, PATH=#{datastore['PATH']}",
|
||||||
|
:active => true
|
||||||
|
)
|
||||||
|
|
||||||
print_status("Target is #{detect_platform(res.body)} #{detect_arch(res.body)}")
|
print_status("Target is #{detect_platform(res.body)} #{detect_arch(res.body)}")
|
||||||
return CheckCode::Vulnerable
|
return CheckCode::Vulnerable
|
||||||
end
|
end
|
||||||
|
@ -212,6 +222,16 @@ class Metasploit3 < Msf::Exploit::Remote
|
||||||
raise RuntimeError, "Upload failed on #{path_tmp} [#{res.code} #{res.message}]"
|
raise RuntimeError, "Upload failed on #{path_tmp} [#{res.code} #{res.message}]"
|
||||||
end
|
end
|
||||||
|
|
||||||
|
report_auth_info(
|
||||||
|
:host => rhost,
|
||||||
|
:port => rport,
|
||||||
|
:sname => (ssl ? "https" : "http"),
|
||||||
|
:user => user,
|
||||||
|
:pass => pass,
|
||||||
|
:proof => "WEBAPP=\"Tomcat Manager App\", VHOST=#{vhost}, PATH=#{datastore['PATH']}",
|
||||||
|
:active => true
|
||||||
|
)
|
||||||
|
|
||||||
#
|
#
|
||||||
# EXECUTE
|
# EXECUTE
|
||||||
#
|
#
|
||||||
|
|
Loading…
Reference in New Issue