One Day Sec

Where does Zimbra store compiled JSP files and how can I enumerate them during debugging?

Zimbra uses Jetty as its web container, and compiled JSP files are stored under `/opt/zimbra/jetty_base/work/zimbra/jsp/org/apache/jsp/`. To enumerate all registered `JspServletWrapper` instances, you can use reflection on the request object to access the `_scope`, `_servlet`, `rctxt`, and `jsps` fields, then iterate through the `ConcurrentHashMap`. This technique is detailed in the "Common Knowledge" section of Setting up Zimbra Vulnerability Debugging Environment.
ZimbraJSPJettyreflectionJspServletWrapperConcurrentHashMapvulnerability research

Browse all Q&A →