Tomcat

1. Try default credentials (error message)

2. Weak credentials

3. Once uploaded, you can deploy war reverse shell using the dashboard or using curl.