CVE-2009-4188

This Metasploit module exploits Apache Tomcat's manager application to deploy a malicious WAR archive containing a JSP payload, achieving remote code execution. It supports multiple platforms (Java, Linux, Windows) and includes automatic target detection.

This Metasploit module exploits Apache Tomcat's manager application to upload and execute a malicious WAR archive containing a JSP payload. It handles authentication, CSRF token extraction, and payload deployment/cleanup.

This Metasploit module exploits Apache Tomcat's Manager application to deploy a malicious WAR archive containing a JSP payload, achieving remote code execution. It supports multiple platforms and architectures, and includes automatic target detection.

The entry describes an authentication bypass vulnerability in HP Operations Dashboard 2.1 for Windows, where default credentials (j2deployer:j2deployer) can be exploited for unauthorized access. No functional exploit code is provided, but it references readily available tools for exploitation.