Re: donloading jsp for pen-test

Hi,

You are not understanding what JSP actually is. JSP will be executed
at the webserver and the output of it would always be HTML page that
you download (at client side). Just try to Google for more
information. How can you do pen-testing without knowing any server
technology?

Regards,

On Fri, Apr 11, 2008 at 8:29 PM, <victorfrankenstein@xxxxxxxxx> wrote:
Helo

I'm currently doing a pen-test against my company site. We have a web application runing over tomcat - in jsp format, one of my goals is try to conect to my datebase from internet using my webapp code. I try to download the jsp files from web server but when i chek it the file contets is only a html code, for this propose i do it whit linux wget, flashget, and others but all ways whit the same result. If any one colud give me any idea about how can i downlad the full jsp file i will appreciate a lot.


Tahnks very much.


Regards,

Victor

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------





--
("Computers are useless. They can only give you answers." - Pablo Picasso)

Shreyas Zare
Co-Founder, Technitium
eMail: shreyas@xxxxxxxxxxxxxx

..::< The Technitium Team >::..
Visit us at www.technitium.com
Contact us at theteam@xxxxxxxxxxxxxx

Technitium Personal Computers
We believe in quality.
Visit http://pc.technitium.com for details.

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------

Relevant Pages

  • Re: Copying secret windows file
    ... SAM file can be accessed only by SYSTEM user. ... buy it or download a solution FREE today! ... Technitium Personal Computers ...
    (Pen-Test)
  • download a file from jsp
    ... I have a jsp where I show a table. ... From each browser I can download a part of the file but not the ... HttpServletResponse response) { ... String strCod_analisis = ...
    (comp.lang.java.help)
  • Problem to download a file from 2 browsers at the time
    ... I have this JSP that download an excel file. ... It works fine if I use only one browser at the same time. ... String strMinute = String.valueOf); ...
    (comp.lang.java.programmer)
  • Problem to download a file from 2 browsers at the time
    ... I have this JSP that download an excel file. ... It works fine if I use only one browser at the same time. ... String strMinute = String.valueOf); ...
    (comp.lang.java.help)
  • Re: donloading jsp for pen-test
    ... If we could download php/jsp/asp files we could have compromised 99% of the sites running them. ... The purpose of jsp is to deliver html from a higher level language, ... Cases when you can download jsp/php/asp files directly are: 1) when the server is misconfigured instead of delivering html it will prompt you to save the source file ... Mail has the best spam protection around ...
    (Pen-Test)