From the course: Kali Linux for Advanced Pen Testing and Ethical Hacking

Unlock the full course today

Join today to access over 24,700 courses taught by industry experts.

Exploiting Tomcat

Exploiting Tomcat - Linux Tutorial

From the course: Kali Linux for Advanced Pen Testing and Ethical Hacking

Start my 1-month free trial Buy for my team

Exploiting Tomcat

“

- Let's take a look at what's running on port 8180 on our Metasploitable server. We'll go directly to the website. 10.0.2.8:8180 And we can say it's a Tomcat server. We have links to the manager and administrator. Let's open the manager portal, and we know that tomcat, when it's installed has credentials, default credentials, tomcat. tomcat, So let's say if they work and they do, and we have the Tomcat application manager showing the applications running in Tomcat, and we have the ability to deploy more applications, either from the Tomcat server or from our system. Just go back to the main menu and have a look at Tomcat administration. We might again try the default credentials, tomcat, tomcat, and we can get into the administration tool. We've now got complete control over the Tomcat web server. Controlling the web service fine, but we really want to control the total system. Kali provides us with a means of creating…

Contents