| Description | Name: Jsp File Browser
Version: 1.2 (2006-07-22)
Homepage: http://www.vonloesch.de/filebrowser.html
Download: http://www.vonloesch.de/files/browser.zip
License: GPL
Description:
An easy to use and easy to install file browser java server page. This JSP program allows remote web-based file access and manipulation.
Features:
- Main Screen (Dir viewer) with preview of directory 1.
- Free to use and modify under the terms of the GPL license
- Create, copy, move, rename and delete files and directories
- Shortkeys
- View Files (pictures, movies, pdf, html,...)
- Javascript filename filter
- Edit textfiles
- Upload files to the server (Status via Upload monitor)
- Download files from the server
- Download groups of files and folders as a single zip file that is created on the fly
- Execute native commands on the server (e.g ls, tar, chmod,...)
- View entries and unpack zip, jar, war and gz files on the server
- Just one file, very easy to install (in fact, just copy it to the server)
- Customizable layout via css file
- Restrict file access via black or whitelist
- Changeable to a read-only (with or without upload) solution
Jsp file browser should work on any JSP1.1 compatible server (e.g. Tomcat>=3.0), I have tested it on Tomcat 4.0 and 5.5, Resin 2.1.7 and Jetty. |
|---|
| Additional Information | Web shells have gotten bad press over the years by how they have been used and abused. However, I choose this shell to be submitted because:
- There are various PHP shells already in Kali, however - not as many JSP,
- There is an 'official homepage',
- It hasn't been modified/encoded to include a 'backdoor',
- The features that it offers (all of which could be used in a CTF, pentest, or remote network admin).
- The features thats are 'missing' when compared to other web shells (e.g. there IS NOT a; email bomber/DoS/DDoS/Botnet - these are not normally used in a typical pentest)
- The ones which are offered in Kali by default are 'simple'. This has various features that are lacking in the current selection.
++ /usr/share/webshells/jsp/
++ /usr/share/laudanum/jsp/
|
|---|
