Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

RTT· red team

RTT · red team

Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Search techniques, tools, commands…⌘K

No scenario

No scenario · all techniques in scope

IdleStatus

0Scenarios

Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Back to Tools

Apache Tomcat Manager

Web Exploitation

Persistence

Tomcat's administrative Manager application controls deployed web apps. The text API requires an enabled Manager app and a valid account with the manager-script role; deployment uses HTTP PUT and starts the WAR as a Tomcat application. This is a web-shell persistence technique only when the WAR actually contains a web shell; arbitrary WAR deployment does not by itself prove exploitation or persistence.

Source

https://tomcat.apache.org/tomcat-9.0-doc/manager-howto.html

Language

HTTP (Tomcat Manager text API)

References

tomcat.apache.org tomcat.apache.org attack.mitre.org curl.se rfc-editor.org

Extended Details

RESTRICTED_ACCESS_BLUR_MARKER