Comments (9)
Hi @ranjithprethan,
Thanks for the report. Could you please provide the following output so I can attempt to reproduce?
- Could you please post the debug output of
./changeme.py -n "Apache Tomcat" -d XXXX
? - What's the URL you're manually verifying?
- What port is the Tomcat service on?
- What default Tomcat default credentials are you manually verifying?
Thanks,
Zach
from changeme.
Hi Zach,
I run kali on my windows using oracle virtual box and I run docker on my kali.
I run changeme on docker.
Kali is configured with bridged network and docker is not, however I can ping the remote IP from docker terminal.
url : http://localhost:8080
credentials : tomcat : tomcat
Thanks
Ranjith
from changeme.
Hi @ranjithprethan,
Thanks for the info. Could you please run the command with the debug -d
flag and paste the output so I can see what it looks like?
Thanks,
Zach
from changeme.
Hi Zach, sure
Here is the screenshot.
from changeme.
Here's the two issues I see going on:
- changeme can't connect to the redis service, please follow the instructions here:
https://github.com/ztgrace/changeme#run-changeme-in-docker Please configure as described and re-run your tests and let me know the results. - Additionally Tomcat never gets fingerprinted. You should see a message like
[21:08:41][http_fingerprint][ismatch] Apache Tomcat basic auth matched: Tomcat Manager Application
when the service is properly fingerprinted. Please validate that the protocol (http vs https) and port are correct.
from changeme.
Hi Zach,
I have configured the redis service and I still get the connection error (Localhost:6379)
Do I also need to run this step below as part of this configuration? Is this intended to scan the redis server?
Run changeme with a --redishost of redis and --output file in our mounted volume: ./changeme.py --redishost redis --output /tmp/mnt/results.csv --protocols ssh --threads 20 -d 192.168.1.0/24
do I need to use my localhost IP address ( docker IP)? My docker runs on kali ( Virtual Box) and Kali runs on windows 7 machine.
this is the url for the tomcat manager
http://localhost:8080/manager/html
Thanks
Ranjith
from changeme.
I have also verified all my running containers on my docker. Redis runs on 6379 port. I am not sure why I still get the connection error
from changeme.
I have noticed that during the fingerprint process, if the body is not present on the yaml file, the fingerprint failed. The problem is that lots of yaml files does not have body (tomcat is one of them).
If "body" is not present, you have to check the status as well, it should solve the problem.
from changeme.
@AlessandroZ do you have an example HTTP request/response when this happens? I've not run into this and it seems to fingerprint all of the Tomcat instances I've seen.
from changeme.
Related Issues (20)
- paramiko.ssh_exception.SSHException: Error reading SSH protocol banner
- Problem with lxml
- AttributeError: 'module' object has no attribute 'banner' HOT 3
- Selenium PhantomJS driver is deprecated HOT 2
- User agent header evaluation order corner case HOT 1
- Error Cannot Allocate Memory HOT 5
- Issue while adding default credential detection for Aruba's ClearPass HOT 6
- delete this HOT 1
- --shodan_query flag use cases HOT 1
- Option to disable screenshots
- Option to stop bruteforcing after at least one valid creds pair for each target was found HOT 3
- stucks on big input file HOT 4
- add to ssh.yml new crediantial , but, ssh credential not found HOT 2
- Adding RabbitMQ scanning capability HOT 1
- no module named cerberus HOT 1
- ImportError: No module named cerberus HOT 3
- Docker image is out of date
- Add custom ports to specific services
- pyodbc ... error HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from changeme.