😹 Python project to bruteforce Apache Tomcat manager login with known-default credentials
Last updated May 23, 2026
97
Stars
14
Forks
0
Issues
0
Stars/day
Attention Score
8
Topics
Language breakdown
No language data available.
▸ Files
click to expand
README
😹 Tomcter
Stealing credentials from a yellow cat
😹 Tomcter is a python tool developed to bruteforce Apache Tomcat manager login with default credentials.
⚡ Installing / Getting started
A quick guide of how to install and use Tomcter.
- Clone the repository with
git clone https://github.com/oppsec/tomcter.git - Install required libraries with
pip install -r requirements.txt
Single Target
python3 main.py -u http://host Multiple Targets
python3 main.py -l file.txt
🐳 Docker
If you want to use Tomcter in a Docker container, follow this commands:- Clone the repository with
git clone https://github.com/oppsec/tomcter.git - Build the image with
sudo docker build -t tomcter:latest . - Run the container with
sudo docker run tomcter:latest
⚙️ Pre-requisites
- Python 3 installed on your machine.
- Install the libraries with
pip3 install -r requirements.txt
✨ Features
- Works with ProxyChains
- Fast Brute-Force
- Low RAM and CPU usage
- Open-Source
- Python ❤️
🔨 Contributing
A quick guide of how to contribute with the project.
- Create a fork from Tomcter repository
- Clone the repository with
git clone https://github.com/your/tomcter.git - Type
cd tomcter/ - Create a branch and make your changes
- Commit and make a git push
- Open a pull request
⚠️ Warning
- The developer is not responsible for any malicious use of this tool.
