Looking at the HTML source code, we can see the JBoss stylesheet (jboss.css), shown in the following screenshot, which is a clear indication that JBoss AS is running:
Sometimes, the administrators change the naming conventions of the files for JBoss, but in the process of doing this, they forget to add the necessary security configuration. Now that we have manually gathered the information for identifying the use of a JBoss AS instance, let's try to identify the instance using Metasploit.