auxiliary/scanner/http/tomcat_mgr_login, I get the following reply after run the exploit command:
authorization not requested.
I have set
rhosts and my test server is listening on rport 80. Can anyone help me out on this?
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.Sign up to join this community
Run wireshark and check the request/response, it sounds like the response doesn't meet expectations, likely due to the http code or some string matching in the response body. Once you have captured the traffic you can compare it to the metasploit plugin code.
However deploying a shell via war file to tomcat doesn't require the use of metasploit, you can just do it in the browser manually.