Web Application Analysisfile-browserjspweb-shellfile-managementuploaddownload

JSP File Browser

JSP File Browser is a Java Server Page that provides remote web-based file access and manipulation on JSP-compatible servers. It enables creating, editing, uploading, downloading, and executing commands on server files and directories.

Description

JSP File Browser is an easy-to-install single-file JSP program designed for remote file management via a web interface. It supports a wide range of operations including creating, copying, moving, renaming, and deleting files and directories, as well as viewing various file types like pictures, movies, PDFs, and HTML. Users can edit text files, upload and download files with progress monitoring, and even download groups of files or folders as a dynamically generated ZIP archive.

Key features include executing native server commands (e.g., ls, tar, chmod), viewing and unpacking archives like ZIP, JAR, WAR, and GZ files, customizable CSS layout, and access restrictions via black or whitelist. It can also be configured as a read-only solution with or without upload capabilities. This makes it useful for server administration, testing, or penetration testing scenarios where web-based file access is needed.

The tool is compatible with any JSP 1.1 server such as Tomcat 3.0+, tested on Tomcat 4.0/5.5, Resin 2.1.7, and Jetty. Installation is straightforward by copying the JSP file to the server, with the Kali package placing it in /usr/share/jsp-file-browser alongside an example CSS file.

How It Works

JSP File Browser operates as a single JSP file (Browser.jsp) deployed on a JSP 1.1-compatible web server, providing a web interface for file operations via HTTP requests. It processes user inputs through JavaServer Pages to interact with the server's file system, executing native commands and handling uploads/downloads using Java's file I/O and servlet APIs. Features like ZIP creation on-the-fly and archive unpacking leverage Java libraries, with access controls implemented via configurable black/whitelists and CSS for UI customization.

Installation

bash
sudo apt install jsp-file-browser

Flags

-hShow help information for jsp-file-browser

Examples

Display help and usage information for the tool
jsp-file-browser -h
View the installation directory contents including Browser.jsp and example-css.css
ls /usr/share/jsp-file-browser
Copy the JSP file to a web server directory for deployment
cp /usr/share/jsp-file-browser/Browser.jsp /var/www/html/
Set appropriate permissions on the deployed JSP file
sudo chmod 644 /var/www/html/Browser.jsp
Change ownership to web server user for proper execution
sudo chown www-data:www-data /var/www/html/Browser.jsp
List detailed contents of the jsp-file-browser package directory
ls -la /usr/share/jsp-file-browser
Updated 2026-04-16kali.org ↗