tomcat

should you find a tomcat admin panel and obtain access to it (perhaps default creds) then proceed to create a .war and upload for reverse shell. nice writeup below

Cloudiot Write-ups (Internal NCC Group CTF 2019)

https://raw.githubusercontent.com/netbiosX/Default-Credentials/master/Apache-Tomcat-Default-Passwords.mdown