check version @ t1/manager/html

check error page, might gives u default creds( tomcat:s3cret)

• creds bruteforcing
• ‣ (RCE with creds)
• authenticated connection msf (tested with 8.5.50)
• or make war msfvenom