Actually use the password we were given...

2012-03-06 23:39:16 -07:00 · 2012-03-06 23:39:16 -07:00 · 8d93e3ad44
parent 9d343ea1c1
commit 8d93e3ad44
1 changed files with 3 additions and 0 deletions
--- a/modules/exploits/multi/http/tomcat_mgr_deploy.rb
+++ b/modules/exploits/multi/http/tomcat_mgr_deploy.rb
@ -117,6 +117,9 @@ class Metasploit3 < Msf::Exploit::Remote
 	end

 	def check
+		datastore['BasicAuthUser'] = datastore['USERNAME']
+		datastore['BasicAuthPass'] = datastore['PASSWORD']
+
 		res = query_serverinfo
 		disconnect
 		return CheckCode::Unknown if res.nil?