{"action":"created","issue":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/8010","repository_url":"https://api.github.com/repos/rapid7/metasploit-framework","labels_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/8010/labels{/name}","comments_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/8010/comments","events_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/8010/events","html_url":"https://github.com/rapid7/metasploit-framework/pull/8010","id":210059623,"number":8010,"title":"Added tomcat_gather modules to Metasploit.","user":{"login":"Opperkip","id":3584362,"avatar_url":"https://avatars.githubusercontent.com/u/3584362?v=3","gravatar_id":"","url":"https://api.github.com/users/Opperkip","html_url":"https://github.com/Opperkip","followers_url":"https://api.github.com/users/Opperkip/followers","following_url":"https://api.github.com/users/Opperkip/following{/other_user}","gists_url":"https://api.github.com/users/Opperkip/gists{/gist_id}","starred_url":"https://api.github.com/users/Opperkip/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Opperkip/subscriptions","organizations_url":"https://api.github.com/users/Opperkip/orgs","repos_url":"https://api.github.com/users/Opperkip/repos","events_url":"https://api.github.com/users/Opperkip/events{/privacy}","received_events_url":"https://api.github.com/users/Opperkip/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2017-02-24T14:19:17Z","updated_at":"2017-02-24T20:20:01Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/pulls/8010","html_url":"https://github.com/rapid7/metasploit-framework/pull/8010","diff_url":"https://github.com/rapid7/metasploit-framework/pull/8010.diff","patch_url":"https://github.com/rapid7/metasploit-framework/pull/8010.patch"},"body":"tomcat_gather can be used to extract username and password combinations from linux and windows systems running tomcat. \r\n\r\n## Verification\r\n\r\nList the steps needed to make sure this thing works\r\n\r\n- Have an existing meterpreter session\r\n- use post/multi/gather/tomcat_gather\r\n- set session X\r\n- run\r\n- Unix OS detected\r\n- tomcat-users.xml found\r\n- Username & password found: tomcat:tomcat\r\n- Username & password found: both:tomcat\r\n- Username & password found: role1:tomcat\r\n- Username & password found: tomcat1:tomcat1\r\n- Username & password found: tomcat2:s3cret\r\n- Post module execution completed\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/comments/282394317","html_url":"https://github.com/rapid7/metasploit-framework/pull/8010#issuecomment-282394317","issue_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/8010","id":282394317,"user":{"login":"dmohanty-r7","id":13103793,"avatar_url":"https://avatars.githubusercontent.com/u/13103793?v=3","gravatar_id":"","url":"https://api.github.com/users/dmohanty-r7","html_url":"https://github.com/dmohanty-r7","followers_url":"https://api.github.com/users/dmohanty-r7/followers","following_url":"https://api.github.com/users/dmohanty-r7/following{/other_user}","gists_url":"https://api.github.com/users/dmohanty-r7/gists{/gist_id}","starred_url":"https://api.github.com/users/dmohanty-r7/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dmohanty-r7/subscriptions","organizations_url":"https://api.github.com/users/dmohanty-r7/orgs","repos_url":"https://api.github.com/users/dmohanty-r7/repos","events_url":"https://api.github.com/users/dmohanty-r7/events{/privacy}","received_events_url":"https://api.github.com/users/dmohanty-r7/received_events","type":"User","site_admin":false},"created_at":"2017-02-24T20:20:01Z","updated_at":"2017-02-24T20:20:01Z","body":"I have tomcat installed following this guide: https://www.digitalocean.com/community/tutorials/how-to-install-apache-tomcat-8-on-ubuntu-16-04\r\n\r\nI attained a session via python meterpreter\r\n\r\nThe module does not find the tomcat-users.xml:\r\n\r\n```\r\nmsf exploit(handler) > use post/multi/gather/tomcat_gather\r\nmsf post(tomcat_gather) > show options\r\n\r\nModule options (post/multi/gather/tomcat_gather):\r\n\r\n   Name     Current Setting  Required  Description\r\n   ----     ---------------  --------  -----------\r\n   SESSION                   yes       The session to run this module on.\r\n\r\nmsf post(tomcat_gather) > set session 1\r\nsession => 1\r\nmsf post(tomcat_gather) > run\r\n\r\n[*] Unix OS detected\r\n[*] Post module execution completed\r\n```"}}
{"actor":{"display_login":"dmohanty-r7"}}