Apache Tomcat Directory Tree
In Web Application or Network Infrastructure testing you may come across server running Apache Tomcat. In a scenario where vulnerabilities such as Local File Inclusion (CWE-829) or Path Traversal (CWE-22) are identified, a knowledge of the directory structure enables testers increase the impact and thus deliver better results. This page is a file listing and pictures the directory structure of an Apache Tomcat 9.0.39 default installation on a Linux host.
./
bin
bootstrap.jar
catalina.bat
catalina.sh
catalina-tasks.xml
ciphers.bat
ciphers.sh
commons-daemon.jar
commons-daemon-native.tar.gz
configtest.bat
configtest.sh
daemon.sh
digest.bat
digest.sh
makebase.bat
makebase.sh
setclasspath.bat
setclasspath.sh
shutdown.bat
shutdown.sh
startup.bat
startup.sh
tomcat-juli.jar
tomcat-native.tar.gz
tool-wrapper.bat
tool-wrapper.sh
version.bat
version.sh
BUILDING.txt
conf
catalina.policy
catalina.properties
context.xml
jaspic-providers.xml
jaspic-providers.xsd
logging.properties
server.xml
tomcat-users.xml
tomcat-users.xsd
web.xml
CONTRIBUTING.md
lib
annotations-api.jar
catalina-ant.jar
catalina-ha.jar
catalina.jar
catalina-ssi.jar
catalina-storeconfig.jar
catalina-tribes.jar
ecj-4.15.jar
el-api.jar
jasper-el.jar
jasper.jar
jaspic-api.jar
jsp-api.jar
servlet-api.jar
tomcat-api.jar
tomcat-coyote.jar
tomcat-dbcp.jar
tomcat-i18n-cs.jar
tomcat-i18n-de.jar
tomcat-i18n-es.jar
tomcat-i18n-fr.jar
tomcat-i18n-ja.jar
tomcat-i18n-ko.jar
tomcat-i18n-pt-BR.jar
tomcat-i18n-ru.jar
tomcat-i18n-zh-CN.jar
tomcat-jdbc.jar
tomcat-jni.jar
tomcat-util.jar
tomcat-util-scan.jar
tomcat-websocket.jar
websocket-api.jar
LICENSE
logs
catalina.<date>.log
catalina.out
host-manager.<date>.log
localhost.<date>.log
localhost_access_log.<date>.txt
manager.<date>.log
NOTICE
README.md
RELEASE-NOTES
RUNNING.txt
temp
safeToDelete.tmp
tomcat.pid
webapps
docs
aio.html
annotationapi
index.html
api
index.html
appdev
build.xml.txt
deployment.html
index.html
installation.html
introduction.html
processes.html
sample
build.xml
docs
README.txt
index.html
sample.war
src
mypackage
Hello.java
web
hello.jsp
images
tomcat.gif
index.html
WEB-INF
web.xml
source.html
web.xml.txt
apr.html
architecture
index.html
overview.html
requestProcess
authentication-process.png
request-process.png
requestProcess.html
startup
serverStartup.pdf
serverStartup.txt
startup.html
balancer-howto.html
building.html
BUILDING.txt
cdi.html
cgi-howto.html
changelog.html
class-loader-howto.html
cluster-howto.html
comments.html
config
ajp.html
automatic-deployment.html
cluster-channel.html
cluster-deployer.html
cluster.html
cluster-interceptor.html
cluster-listener.html
cluster-manager.html
cluster-membership.html
cluster-receiver.html
cluster-sender.html
cluster-valve.html
context.html
cookie-processor.html
credentialhandler.html
engine.html
executor.html
filter.html
globalresources.html
host.html
http2.html
http.html
index.html
jar-scan-filter.html
jar-scanner.html
jaspic.html
listeners.html
loader.html
manager.html
realm.html
resources.html
server.html
service.html
sessionidgenerator.html
systemprops.html
valve.html
connectors.html
default-servlet.html
deployer-howto.html
developers.html
elapi
index.html
graal.html
host-manager-howto.html
html-host-manager-howto.html
html-manager-howto.html
images
add.gif
asf-logo.svg
code.gif
cors-flowchart.png
design.gif
docs.gif
docs-stylesheet.css
fix.gif
fonts
fonts.css
OpenSans400italic.woff
OpenSans400.woff
OpenSans600italic.woff
OpenSans600.woff
OpenSans700italic.woff
OpenSans700.woff
tomcat.gif
tomcat.png
update.gif
void.gif
index.html
introduction.html
jasper-howto.html
jaspicapi
index.html
jdbc-pool.html
jndi-datasource-examples-howto.html
jndi-resources-howto.html
jspapi
index.html
logging.html
manager-howto.html
maven-jars.html
mbeans-descriptors.dtd
mbeans-descriptors-howto.html
monitoring.html
proxy-howto.html
realm-howto.html
RELEASE-NOTES.txt
rewrite.html
RUNNING.txt
security-howto.html
security-manager-howto.html
servletapi
index.html
setup.html
ssi-howto.html
ssl-howto.html
tribes
developers.html
faq.html
interceptors.html
introduction.html
membership.html
setup.html
status.html
transport.html
virtual-hosting-howto.html
WEB-INF
web.xml
websocketapi
index.html
web-socket-howto.html
windows-auth-howto.html
windows-service-howto.html
examples
index.html
jsp
async
async1.jsp
async1.jsp.html
async3.jsp
async3.jsp.html
index.jsp
index.jsp.html
cal
cal1.jsp
cal1.jsp.html
cal2.jsp
cal2.jsp.html
calendar.html
Entries.java.html
Entry.java.html
JspCalendar.java.html
login.html
TableBean.java.html
checkbox
check.html
checkresult.jsp
checkresult.jsp.html
CheckTest.html
cresult.html
colors
clr.html
ColorGameBean.html
colors.html
colrs.jsp
colrs.jsp.html
dates
date.html
date.jsp
date.jsp.html
error
er.html
err.jsp
err.jsp.html
error.html
errorpge.jsp
errorpge.jsp.html
forward
forward.jsp
forward.jsp.html
fwd.html
one.jsp
one.jsp.html
two.html
images
code.gif
execute.gif
return.gif
include
foo.html
foo.jsp
foo.jsp.html
inc.html
include.jsp
include.jsp.html
index.html
jsp2
el
basic-arithmetic.html
basic-arithmetic.jsp
basic-arithmetic.jsp.html
basic-comparisons.html
basic-comparisons.jsp
basic-comparisons.jsp.html
composite.html
composite.jsp
composite.jsp.html
functions.html
Functions.java.html
functions.jsp
functions.jsp.html
implicit-objects.html
implicit-objects.jsp
implicit-objects.jsp.html
ValuesBean.java.html
ValuesTag.java.html
jspattribute
FooBean.java.html
HelloWorldSimpleTag.java.html
jspattribute.html
jspattribute.jsp
jspattribute.jsp.html
shuffle.html
shuffle.jsp
shuffle.jsp.html
ShuffleSimpleTag.java.html
TileSimpleTag.java.html
jspx
basic.html
basic.jspx
basic.jspx.html
svgexample.html
textRotate.html
textRotate.jpg
textRotate.jspx
textRotate.jspx.html
misc
coda.jspf
coda.jspf.html
config.html
config.jsp
config.jsp.html
dynamicattrs.html
dynamicattrs.jsp
dynamicattrs.jsp.html
EchoAttributesTag.java.html
prelude.jspf
prelude.jspf.html
simpletag
BookBean.java.html
book.html
book.jsp
book.jsp.html
FindBookSimpleTag.java.html
Functions.java.html
hello.html
hello.jsp
hello.jsp.html
HelloWorldSimpleTag.java.html
repeat.html
repeat.jsp
repeat.jsp.html
RepeatSimpleTag.java.html
tagfiles
displayProducts.tag.html
hello.html
hello.jsp
hello.jsp.html
helloWorld.tag.html
panel.html
panel.jsp
panel.jsp.html
panel.tag.html
products.html
products.jsp
products.jsp.html
jsptoserv
hello.jsp
hello.jsp.html
jsptoservlet.jsp
jsptoservlet.jsp.html
jts.html
ServletToJsp.java.html
num
numguess.html
numguess.jsp
numguess.jsp.html
plugin
applet
Clock2.class
Clock2.java
plugin.html
plugin.jsp
plugin.jsp.html
security
protected
error.jsp
error.jsp.html
index.jsp
index.jsp.html
login.jsp
login.jsp.html
sessions
carts.html
carts.jsp
carts.jsp.html
crt.html
DummyCart.html
simpletag
foo.html
foo.jsp
foo.jsp.html
snp
snoop.html
snoop.jsp
snoop.jsp.html
tagplugin
choose.html
choose.jsp
choose.jsp.html
foreach.html
foreach.jsp
foreach.jsp.html
howto.html
if.html
if.jsp
if.jsp.html
notes.html
xml
xml.html
xml.jsp
xml.jsp.html
servlets
cookies.html
helloworld.html
images
code.gif
execute.gif
return.gif
index.html
nonblocking
bytecounter.html
reqheaders.html
reqinfo.html
reqparams.html
sessions.html
WEB-INF
classes
async
Async0$1.class
Async0.class
Async0.java
Async1$1.class
Async1.class
Async1.java
Async2$1.class
Async2.class
Async2.java
Async3.class
Async3.java
AsyncStockContextListener.class
AsyncStockContextListener.java
AsyncStockServlet.class
AsyncStockServlet.java
Stockticker$Stock.class
Stockticker$TickListener.class
Stockticker.class
Stockticker.java
cal
Entries.class
Entries.java
Entry.class
Entry.java
JspCalendar.class
JspCalendar.java
TableBean.class
TableBean.java
checkbox
CheckTest.class
CheckTest.java
colors
ColorGameBean.class
ColorGameBean.java
compressionFilters
CompressionFilter.class
CompressionFilter.java
CompressionFilterTestServlet.class
CompressionFilterTestServlet.java
CompressionResponseStream.class
CompressionResponseStream.java
CompressionServletResponseWrapper.class
CompressionServletResponseWrapper.java
CookieExample.class
CookieExample.java
dates
JspCalendar.class
JspCalendar.java
error
Smart.class
Smart.java
examples
ExampleTagBase.class
ExampleTagBase.java
FooTag.class
FooTagExtraInfo.class
FooTagExtraInfo.java
FooTag.java
LogTag.class
LogTag.java
ValuesTag.class
ValuesTag.java
filters
ExampleFilter.class
ExampleFilter.java
HelloWorldExample.class
HelloWorldExample.java
http2
SimpleImagePush.class
SimpleImagePush.java
jsp2
examples
BookBean.class
BookBean.java
el
Functions.class
Functions.java
FooBean.class
FooBean.java
simpletag
EchoAttributesTag.class
EchoAttributesTag.java
FindBookSimpleTag.class
FindBookSimpleTag.java
HelloWorldSimpleTag.class
HelloWorldSimpleTag.java
RepeatSimpleTag.class
RepeatSimpleTag.java
ShuffleSimpleTag.class
ShuffleSimpleTag.java
TileSimpleTag.class
TileSimpleTag.java
ValuesBean.class
ValuesBean.java
listeners
ContextListener.class
ContextListener.java
SessionListener.class
SessionListener.java
LocalStrings_cs.properties
LocalStrings_de.properties
LocalStrings_es.properties
LocalStrings_fr.properties
LocalStrings_ja.properties
LocalStrings_ko.properties
LocalStrings.properties
LocalStrings_pt_BR.properties
LocalStrings_pt.properties
LocalStrings_ru.properties
LocalStrings_zh_CN.properties
nonblocking
ByteCounter$1.class
ByteCounter$CounterListener.class
ByteCounter.class
ByteCounter.java
NumberWriter$1.class
NumberWriter$NumberWriterListener.class
NumberWriter.class
NumberWriter.java
num
NumberGuessBean.class
NumberGuessBean.java
RequestHeaderExample.class
RequestHeaderExample.java
RequestInfoExample.class
RequestInfoExample.java
RequestParamExample.class
RequestParamExample.java
ServletToJsp.class
ServletToJsp.java
SessionExample.class
SessionExample.java
sessions
DummyCart.class
DummyCart.java
trailers
ResponseTrailers$1.class
ResponseTrailers$TrailerFieldSupplier.class
ResponseTrailers.class
ResponseTrailers.java
util
CookieFilter.class
CookieFilter.java
HTMLFilter.class
HTMLFilter.java
validators
DebugValidator.class
DebugValidator.java
websocket
chat
ChatAnnotation.class
ChatAnnotation.java
drawboard
Client$1.class
Client.class
Client.java
DrawboardContextListener.class
DrawboardContextListener.java
DrawboardEndpoint$1.class
DrawboardEndpoint$2.class
DrawboardEndpoint$3$1.class
DrawboardEndpoint$3.class
DrawboardEndpoint.class
DrawboardEndpoint.java
DrawMessage$ParseException.class
DrawMessage.class
DrawMessage.java
Room$1$1.class
Room$1.class
Room$2.class
Room$MessageType.class
Room$Player.class
Room.class
Room.java
wsmessages
AbstractWebsocketMessage.class
AbstractWebsocketMessage.java
BinaryWebsocketMessage.class
BinaryWebsocketMessage.java
CloseWebsocketMessage.class
CloseWebsocketMessage.java
StringWebsocketMessage.class
StringWebsocketMessage.java
echo
EchoAnnotation.class
EchoAnnotation.java
EchoAsyncAnnotation$1.class
EchoAsyncAnnotation$CompletedFuture.class
EchoAsyncAnnotation.class
EchoAsyncAnnotation.java
EchoEndpoint$1.class
EchoEndpoint$EchoMessageHandlerBinary.class
EchoEndpoint$EchoMessageHandlerText.class
EchoEndpoint.class
EchoEndpoint.java
EchoStreamAnnotation.class
EchoStreamAnnotation.java
servers.json
ExamplesConfig.class
ExamplesConfig.java
snake
Direction.class
Direction.java
Location$1.class
Location.class
Location.java
SnakeAnnotation.class
SnakeAnnotation.java
Snake.class
Snake.java
SnakeTimer$1.class
SnakeTimer.class
SnakeTimer.java
jsp
applet
Clock2.java
debug-taglib.tld
example-taglib.tld
jsp2
jsp2-example-taglib.tld
lib
taglibs-standard-impl-1.2.5.jar
taglibs-standard-spec-1.2.5.jar
tags
displayProducts.tag
helloWorld.tag
panel.tag
web.xml
websocket
chat.xhtml
drawboard.xhtml
echo.xhtml
index.xhtml
snake.xhtml
host-manager
images
asf-logo.svg
tomcat.gif
index.jsp
manager.xml
META-INF
context.xml
WEB-INF
jsp
401.jsp
403.jsp
404.jsp
web.xml
manager
css
manager.css
images
asf-logo.svg
tomcat.svg
index.jsp
META-INF
context.xml
status.xsd
WEB-INF
jsp
401.jsp
403.jsp
404.jsp
connectorCerts.jsp
connectorCiphers.jsp
connectorTrustedCerts.jsp
sessionDetail.jsp
sessionsList.jsp
web.xml
xform.xsl
ROOT
asf-logo-wide.svg
bg-button.png
bg-middle.png
bg-nav.png
bg-upper.png
favicon.ico
index.jsp
RELEASE-NOTES.txt
tomcat.css
tomcat.gif
tomcat.png
tomcat-power.gif
tomcat.svg
WEB-INF
web.xml
work
Catalina
localhost
docs
examples
host-manager
org
apache
jsp
index_jsp.class
index_jsp.java
WEB_002dINF
jsp
_401_jsp.class
_401_jsp.java
_404_jsp.class
_404_jsp.java
manager
org
apache
jsp
WEB_002dINF
jsp
_401_jsp.class
_401_jsp.java
ROOT
org
apache
jsp
index_jsp.class
index_jsp.java
131 directories, 657 files