Tomcat Web Server Penetration Testing
Enumeration using Nmap
nmap -p- -sV 192.168.1.6 -vv
Observer that the Tomcat server is up and running on port 8080 in the ubuntu linux server
OPEN IP: http://192.168.1.6:8080
Exploitation using Metasploit Framework
The exploit used here is exploit/multi/http/tomcat_mgr_upload
Shell Access | whoami | id
