JSP File Browser
JSP File Browser is a Java Server Page that provides remote web-based file access and manipulation on JSP-compatible servers. It enables creating, editing, uploading, downloading, and executing commands on server files and directories.
Description
JSP File Browser is an easy-to-install single-file JSP program designed for remote file management via a web interface. It supports a wide range of operations including creating, copying, moving, renaming, and deleting files and directories, as well as viewing various file types like pictures, movies, PDFs, and HTML. Users can edit text files, upload and download files with progress monitoring, and even download groups of files or folders as a dynamically generated ZIP archive.
Key features include executing native server commands (e.g., ls, tar, chmod), viewing and unpacking archives like ZIP, JAR, WAR, and GZ files, customizable CSS layout, and access restrictions via black or whitelist. It can also be configured as a read-only solution with or without upload capabilities. This makes it useful for server administration, testing, or penetration testing scenarios where web-based file access is needed.
The tool is compatible with any JSP 1.1 server such as Tomcat 3.0+, tested on Tomcat 4.0/5.5, Resin 2.1.7, and Jetty. Installation is straightforward by copying the JSP file to the server, with the Kali package placing it in /usr/share/jsp-file-browser alongside an example CSS file.
How It Works
JSP File Browser operates as a single JSP file (Browser.jsp) deployed on a JSP 1.1-compatible web server, providing a web interface for file operations via HTTP requests. It processes user inputs through JavaServer Pages to interact with the server's file system, executing native commands and handling uploads/downloads using Java's file I/O and servlet APIs. Features like ZIP creation on-the-fly and archive unpacking leverage Java libraries, with access controls implemented via configurable black/whitelists and CSS for UI customization.
Installation
sudo apt install jsp-file-browserFlags
Examples
jsp-file-browser -hls /usr/share/jsp-file-browsercp /usr/share/jsp-file-browser/Browser.jsp /var/www/html/sudo chmod 644 /var/www/html/Browser.jspsudo chown www-data:www-data /var/www/html/Browser.jspls -la /usr/share/jsp-file-browser