How can I use reflection to enumerate all fields of a request object in a JSP page?

Question

Onedaysec · Accepted Answer

You can use `getClass().getDeclaredFields()` on the request object to retrieve all its fields, including private ones. For example: `Field[] fields = request.getClass().getDeclaredFields();` then iterate and print each field name. This technique is detailed in the article [Java Exploitation Techniques - Modifying Properties via Reflection](/news/java-exploitation-techniques-modifying-properties-via-reflection).