rapid7/metasploit-framework — pull request #312 by andurin (2012-04-06 11:48:18+00:00)
Title: tomcat_mgr_deploy may report successful creds - Tested and running ^^

Using following code for 'check' as 'exploit':
report_auth_info(
:host => rhost,
:port => rport,
:sname => (ssl ? "https" : "http"),
:user => datastore['BasicAuthUser'],
:pass => datastore['BasicAuthPass'],
:proof => "WEBAPP=\"Tomcat Manager App\", VHOST=#{vhost}, PATH=#{datastore['PATH']}",
:active => true
)

Resulting in:

Credentials
===========

host port user pass type active?
---- ---- ---- ---- ---- -------
192.168.x.xxx 8080 tomcat s3cret password true