> For the complete documentation index, see [llms.txt](https://ret2basic.gitbook.io/ctfnote/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ret2basic.gitbook.io/ctfnote/red-teaming/enumeration/service-enumeration/apache-jserv-protocol-port-8081.md).

# Apache JServ Protocol (Port 8081)

Ghostcat

### Ghostcat

From HackTricks:

![Ghostcat - HackTricks](https://3988450783-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MWVjG_njKgBtvmnKaJh%2F-Mg2DvVIZz524fyhxTuN%2F-Mg2nUZLMIlv90Ekg0sN%2Fimage.png?alt=media\&token=f93d2c0d-ff5b-4c63-b769-7e1d4b038ba3)

Use the metasploit `module auxiliary/admin/http/tomcat_ghostcat` to leak credential.