Ghostcat
Last updated 3 years ago
From HackTricks:
Use the metasploit module auxiliary/admin/http/tomcat_ghostcat to leak credential.
module auxiliary/admin/http/tomcat_ghostcat