Skip to content

Conversation

tolfsh
Copy link
Contributor

@tolfsh tolfsh commented Feb 13, 2025

Hi!
I was trying this tool during assessment and it appears that provided credentials are not tested and silently ignored because of a try/catch. This PR contains:

  • A fix for the problem : Now the provided credentials are tested if provided through --tomcat-usernames-file, --tomcat-passwords-file, --tomcat-username or --tomcat-password. Only the provided credentials are test if they are provided, otherwise only the defaults are tested.
  • Add verbose mode : Verbose mode was present in argument and config but was not linked, thus not usable. Now the number of tested credentials is printed in verbose mode.

Happy pentesting,

TOLF

@p0dalirius p0dalirius self-assigned this Feb 16, 2025
@p0dalirius p0dalirius added the bug Something isn't working label Feb 16, 2025
@p0dalirius p0dalirius changed the title Fix bug where provided credentials are not tested [bugfix] Fix bug where provided credentials are not tested Feb 16, 2025
@p0dalirius p0dalirius merged commit c084979 into p0dalirius:main Feb 16, 2025
1 check passed
@p0dalirius
Copy link
Owner

Thank you @tolfsh!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants