Apache Tomcat Directory Tree

In Web Application or Network Infrastructure testing you may come across server running Apache Tomcat. In a scenario where vulnerabilities such as Local File Inclusion (CWE-829) or Path Traversal (CWE-22) are identified, a knowledge of the directory structure enables testers increase the impact and thus deliver better results. This page is a file listing and pictures the directory structure of an Apache Tomcat 9.0.39 default installation on a Linux host.

./
 bin
  bootstrap.jar
  catalina.bat
  catalina.sh
  catalina-tasks.xml
  ciphers.bat
  ciphers.sh
  commons-daemon.jar
  commons-daemon-native.tar.gz
  configtest.bat
  configtest.sh
  daemon.sh
  digest.bat
  digest.sh
  makebase.bat
  makebase.sh
  setclasspath.bat
  setclasspath.sh
  shutdown.bat
  shutdown.sh
  startup.bat
  startup.sh
  tomcat-juli.jar
  tomcat-native.tar.gz
  tool-wrapper.bat
  tool-wrapper.sh
  version.bat
  version.sh
 BUILDING.txt
 conf
  catalina.policy
  catalina.properties
  context.xml
  jaspic-providers.xml
  jaspic-providers.xsd
  logging.properties
  server.xml
  tomcat-users.xml
  tomcat-users.xsd
  web.xml
 CONTRIBUTING.md
 lib
  annotations-api.jar
  catalina-ant.jar
  catalina-ha.jar
  catalina.jar
  catalina-ssi.jar
  catalina-storeconfig.jar
  catalina-tribes.jar
  ecj-4.15.jar
  el-api.jar
  jasper-el.jar
  jasper.jar
  jaspic-api.jar
  jsp-api.jar
  servlet-api.jar
  tomcat-api.jar
  tomcat-coyote.jar
  tomcat-dbcp.jar
  tomcat-i18n-cs.jar
  tomcat-i18n-de.jar
  tomcat-i18n-es.jar
  tomcat-i18n-fr.jar
  tomcat-i18n-ja.jar
  tomcat-i18n-ko.jar
  tomcat-i18n-pt-BR.jar
  tomcat-i18n-ru.jar
  tomcat-i18n-zh-CN.jar
  tomcat-jdbc.jar
  tomcat-jni.jar
  tomcat-util.jar
  tomcat-util-scan.jar
  tomcat-websocket.jar
  websocket-api.jar
 LICENSE
 logs
  catalina.<date>.log
  catalina.out
  host-manager.<date>.log
  localhost.<date>.log
  localhost_access_log.<date>.txt
  manager.<date>.log
 NOTICE
 README.md
 RELEASE-NOTES
 RUNNING.txt
 temp
  safeToDelete.tmp
  tomcat.pid
 webapps
  docs
   aio.html
   annotationapi
    index.html
   api
    index.html
   appdev
    build.xml.txt
    deployment.html
    index.html
    installation.html
    introduction.html
    processes.html
    sample
     build.xml
     docs
      README.txt
     index.html
     sample.war
     src
      mypackage
          Hello.java
     web
         hello.jsp
         images
          tomcat.gif
         index.html
         WEB-INF
             web.xml
    source.html
    web.xml.txt
   apr.html
   architecture
    index.html
    overview.html
    requestProcess
     authentication-process.png
     request-process.png
    requestProcess.html
    startup
     serverStartup.pdf
     serverStartup.txt
    startup.html
   balancer-howto.html
   building.html
   BUILDING.txt
   cdi.html
   cgi-howto.html
   changelog.html
   class-loader-howto.html
   cluster-howto.html
   comments.html
   config
    ajp.html
    automatic-deployment.html
    cluster-channel.html
    cluster-deployer.html
    cluster.html
    cluster-interceptor.html
    cluster-listener.html
    cluster-manager.html
    cluster-membership.html
    cluster-receiver.html
    cluster-sender.html
    cluster-valve.html
    context.html
    cookie-processor.html
    credentialhandler.html
    engine.html
    executor.html
    filter.html
    globalresources.html
    host.html
    http2.html
    http.html
    index.html
    jar-scan-filter.html
    jar-scanner.html
    jaspic.html
    listeners.html
    loader.html
    manager.html
    realm.html
    resources.html
    server.html
    service.html
    sessionidgenerator.html
    systemprops.html
    valve.html
   connectors.html
   default-servlet.html
   deployer-howto.html
   developers.html
   elapi
    index.html
   graal.html
   host-manager-howto.html
   html-host-manager-howto.html
   html-manager-howto.html
   images
    add.gif
    asf-logo.svg
    code.gif
    cors-flowchart.png
    design.gif
    docs.gif
    docs-stylesheet.css
    fix.gif
    fonts
     fonts.css
     OpenSans400italic.woff
     OpenSans400.woff
     OpenSans600italic.woff
     OpenSans600.woff
     OpenSans700italic.woff
     OpenSans700.woff
    tomcat.gif
    tomcat.png
    update.gif
    void.gif
   index.html
   introduction.html
   jasper-howto.html
   jaspicapi
    index.html
   jdbc-pool.html
   jndi-datasource-examples-howto.html
   jndi-resources-howto.html
   jspapi
    index.html
   logging.html
   manager-howto.html
   maven-jars.html
   mbeans-descriptors.dtd
   mbeans-descriptors-howto.html
   monitoring.html
   proxy-howto.html
   realm-howto.html
   RELEASE-NOTES.txt
   rewrite.html
   RUNNING.txt
   security-howto.html
   security-manager-howto.html
   servletapi
    index.html
   setup.html
   ssi-howto.html
   ssl-howto.html
   tribes
    developers.html
    faq.html
    interceptors.html
    introduction.html
    membership.html
    setup.html
    status.html
    transport.html
   virtual-hosting-howto.html
   WEB-INF
    web.xml
   websocketapi
    index.html
   web-socket-howto.html
   windows-auth-howto.html
   windows-service-howto.html
  examples
   index.html
   jsp
    async
     async1.jsp
     async1.jsp.html
     async3.jsp
     async3.jsp.html
     index.jsp
     index.jsp.html
    cal
     cal1.jsp
     cal1.jsp.html
     cal2.jsp
     cal2.jsp.html
     calendar.html
     Entries.java.html
     Entry.java.html
     JspCalendar.java.html
     login.html
     TableBean.java.html
    checkbox
     check.html
     checkresult.jsp
     checkresult.jsp.html
     CheckTest.html
     cresult.html
    colors
     clr.html
     ColorGameBean.html
     colors.html
     colrs.jsp
     colrs.jsp.html
    dates
     date.html
     date.jsp
     date.jsp.html
    error
     er.html
     err.jsp
     err.jsp.html
     error.html
     errorpge.jsp
     errorpge.jsp.html
    forward
     forward.jsp
     forward.jsp.html
     fwd.html
     one.jsp
     one.jsp.html
     two.html
    images
     code.gif
     execute.gif
     return.gif
    include
     foo.html
     foo.jsp
     foo.jsp.html
     inc.html
     include.jsp
     include.jsp.html
    index.html
    jsp2
     el
      basic-arithmetic.html
      basic-arithmetic.jsp
      basic-arithmetic.jsp.html
      basic-comparisons.html
      basic-comparisons.jsp
      basic-comparisons.jsp.html
      composite.html
      composite.jsp
      composite.jsp.html
      functions.html
      Functions.java.html
      functions.jsp
      functions.jsp.html
      implicit-objects.html
      implicit-objects.jsp
      implicit-objects.jsp.html
      ValuesBean.java.html
      ValuesTag.java.html
     jspattribute
      FooBean.java.html
      HelloWorldSimpleTag.java.html
      jspattribute.html
      jspattribute.jsp
      jspattribute.jsp.html
      shuffle.html
      shuffle.jsp
      shuffle.jsp.html
      ShuffleSimpleTag.java.html
      TileSimpleTag.java.html
     jspx
      basic.html
      basic.jspx
      basic.jspx.html
      svgexample.html
      textRotate.html
      textRotate.jpg
      textRotate.jspx
      textRotate.jspx.html
     misc
      coda.jspf
      coda.jspf.html
      config.html
      config.jsp
      config.jsp.html
      dynamicattrs.html
      dynamicattrs.jsp
      dynamicattrs.jsp.html
      EchoAttributesTag.java.html
      prelude.jspf
      prelude.jspf.html
     simpletag
      BookBean.java.html
      book.html
      book.jsp
      book.jsp.html
      FindBookSimpleTag.java.html
      Functions.java.html
      hello.html
      hello.jsp
      hello.jsp.html
      HelloWorldSimpleTag.java.html
      repeat.html
      repeat.jsp
      repeat.jsp.html
      RepeatSimpleTag.java.html
     tagfiles
         displayProducts.tag.html
         hello.html
         hello.jsp
         hello.jsp.html
         helloWorld.tag.html
         panel.html
         panel.jsp
         panel.jsp.html
         panel.tag.html
         products.html
         products.jsp
         products.jsp.html
    jsptoserv
     hello.jsp
     hello.jsp.html
     jsptoservlet.jsp
     jsptoservlet.jsp.html
     jts.html
     ServletToJsp.java.html
    num
     numguess.html
     numguess.jsp
     numguess.jsp.html
    plugin
     applet
      Clock2.class
      Clock2.java
     plugin.html
     plugin.jsp
     plugin.jsp.html
    security
     protected
         error.jsp
         error.jsp.html
         index.jsp
         index.jsp.html
         login.jsp
         login.jsp.html
    sessions
     carts.html
     carts.jsp
     carts.jsp.html
     crt.html
     DummyCart.html
    simpletag
     foo.html
     foo.jsp
     foo.jsp.html
    snp
     snoop.html
     snoop.jsp
     snoop.jsp.html
    tagplugin
     choose.html
     choose.jsp
     choose.jsp.html
     foreach.html
     foreach.jsp
     foreach.jsp.html
     howto.html
     if.html
     if.jsp
     if.jsp.html
     notes.html
    xml
        xml.html
        xml.jsp
        xml.jsp.html
   servlets
    cookies.html
    helloworld.html
    images
     code.gif
     execute.gif
     return.gif
    index.html
    nonblocking
     bytecounter.html
    reqheaders.html
    reqinfo.html
    reqparams.html
    sessions.html
   WEB-INF
    classes
     async
      Async0$1.class
      Async0.class
      Async0.java
      Async1$1.class
      Async1.class
      Async1.java
      Async2$1.class
      Async2.class
      Async2.java
      Async3.class
      Async3.java
      AsyncStockContextListener.class
      AsyncStockContextListener.java
      AsyncStockServlet.class
      AsyncStockServlet.java
      Stockticker$Stock.class
      Stockticker$TickListener.class
      Stockticker.class
      Stockticker.java
     cal
      Entries.class
      Entries.java
      Entry.class
      Entry.java
      JspCalendar.class
      JspCalendar.java
      TableBean.class
      TableBean.java
     checkbox
      CheckTest.class
      CheckTest.java
     colors
      ColorGameBean.class
      ColorGameBean.java
     compressionFilters
      CompressionFilter.class
      CompressionFilter.java
      CompressionFilterTestServlet.class
      CompressionFilterTestServlet.java
      CompressionResponseStream.class
      CompressionResponseStream.java
      CompressionServletResponseWrapper.class
      CompressionServletResponseWrapper.java
     CookieExample.class
     CookieExample.java
     dates
      JspCalendar.class
      JspCalendar.java
     error
      Smart.class
      Smart.java
     examples
      ExampleTagBase.class
      ExampleTagBase.java
      FooTag.class
      FooTagExtraInfo.class
      FooTagExtraInfo.java
      FooTag.java
      LogTag.class
      LogTag.java
      ValuesTag.class
      ValuesTag.java
     filters
      ExampleFilter.class
      ExampleFilter.java
     HelloWorldExample.class
     HelloWorldExample.java
     http2
      SimpleImagePush.class
      SimpleImagePush.java
     jsp2
      examples
          BookBean.class
          BookBean.java
          el
           Functions.class
           Functions.java
          FooBean.class
          FooBean.java
          simpletag
           EchoAttributesTag.class
           EchoAttributesTag.java
           FindBookSimpleTag.class
           FindBookSimpleTag.java
           HelloWorldSimpleTag.class
           HelloWorldSimpleTag.java
           RepeatSimpleTag.class
           RepeatSimpleTag.java
           ShuffleSimpleTag.class
           ShuffleSimpleTag.java
           TileSimpleTag.class
           TileSimpleTag.java
          ValuesBean.class
          ValuesBean.java
     listeners
      ContextListener.class
      ContextListener.java
      SessionListener.class
      SessionListener.java
     LocalStrings_cs.properties
     LocalStrings_de.properties
     LocalStrings_es.properties
     LocalStrings_fr.properties
     LocalStrings_ja.properties
     LocalStrings_ko.properties
     LocalStrings.properties
     LocalStrings_pt_BR.properties
     LocalStrings_pt.properties
     LocalStrings_ru.properties
     LocalStrings_zh_CN.properties
     nonblocking
      ByteCounter$1.class
      ByteCounter$CounterListener.class
      ByteCounter.class
      ByteCounter.java
      NumberWriter$1.class
      NumberWriter$NumberWriterListener.class
      NumberWriter.class
      NumberWriter.java
     num
      NumberGuessBean.class
      NumberGuessBean.java
     RequestHeaderExample.class
     RequestHeaderExample.java
     RequestInfoExample.class
     RequestInfoExample.java
     RequestParamExample.class
     RequestParamExample.java
     ServletToJsp.class
     ServletToJsp.java
     SessionExample.class
     SessionExample.java
     sessions
      DummyCart.class
      DummyCart.java
     trailers
      ResponseTrailers$1.class
      ResponseTrailers$TrailerFieldSupplier.class
      ResponseTrailers.class
      ResponseTrailers.java
     util
      CookieFilter.class
      CookieFilter.java
      HTMLFilter.class
      HTMLFilter.java
     validators
      DebugValidator.class
      DebugValidator.java
     websocket
         chat
          ChatAnnotation.class
          ChatAnnotation.java
         drawboard
          Client$1.class
          Client.class
          Client.java
          DrawboardContextListener.class
          DrawboardContextListener.java
          DrawboardEndpoint$1.class
          DrawboardEndpoint$2.class
          DrawboardEndpoint$3$1.class
          DrawboardEndpoint$3.class
          DrawboardEndpoint.class
          DrawboardEndpoint.java
          DrawMessage$ParseException.class
          DrawMessage.class
          DrawMessage.java
          Room$1$1.class
          Room$1.class
          Room$2.class
          Room$MessageType.class
          Room$Player.class
          Room.class
          Room.java
          wsmessages
              AbstractWebsocketMessage.class
              AbstractWebsocketMessage.java
              BinaryWebsocketMessage.class
              BinaryWebsocketMessage.java
              CloseWebsocketMessage.class
              CloseWebsocketMessage.java
              StringWebsocketMessage.class
              StringWebsocketMessage.java
         echo
          EchoAnnotation.class
          EchoAnnotation.java
          EchoAsyncAnnotation$1.class
          EchoAsyncAnnotation$CompletedFuture.class
          EchoAsyncAnnotation.class
          EchoAsyncAnnotation.java
          EchoEndpoint$1.class
          EchoEndpoint$EchoMessageHandlerBinary.class
          EchoEndpoint$EchoMessageHandlerText.class
          EchoEndpoint.class
          EchoEndpoint.java
          EchoStreamAnnotation.class
          EchoStreamAnnotation.java
          servers.json
         ExamplesConfig.class
         ExamplesConfig.java
         snake
             Direction.class
             Direction.java
             Location$1.class
             Location.class
             Location.java
             SnakeAnnotation.class
             SnakeAnnotation.java
             Snake.class
             Snake.java
             SnakeTimer$1.class
             SnakeTimer.class
             SnakeTimer.java
    jsp
     applet
      Clock2.java
     debug-taglib.tld
     example-taglib.tld
    jsp2
     jsp2-example-taglib.tld
    lib
     taglibs-standard-impl-1.2.5.jar
     taglibs-standard-spec-1.2.5.jar
    tags
     displayProducts.tag
     helloWorld.tag
     panel.tag
    web.xml
   websocket
       chat.xhtml
       drawboard.xhtml
       echo.xhtml
       index.xhtml
       snake.xhtml
  host-manager
   images
    asf-logo.svg
    tomcat.gif
   index.jsp
   manager.xml
   META-INF
    context.xml
   WEB-INF
       jsp
        401.jsp
        403.jsp
        404.jsp
       web.xml
  manager
   css
    manager.css
   images
    asf-logo.svg
    tomcat.svg
   index.jsp
   META-INF
    context.xml
   status.xsd
   WEB-INF
    jsp
     401.jsp
     403.jsp
     404.jsp
     connectorCerts.jsp
     connectorCiphers.jsp
     connectorTrustedCerts.jsp
     sessionDetail.jsp
     sessionsList.jsp
    web.xml
   xform.xsl
  ROOT
      asf-logo-wide.svg
      bg-button.png
      bg-middle.png
      bg-nav.png
      bg-upper.png
      favicon.ico
      index.jsp
      RELEASE-NOTES.txt
      tomcat.css
      tomcat.gif
      tomcat.png
      tomcat-power.gif
      tomcat.svg
      WEB-INF
          web.xml
 work
     Catalina
         localhost
             docs
             examples
             host-manager
              org
                  apache
                      jsp
                          index_jsp.class
                          index_jsp.java
                          WEB_002dINF
                              jsp
                                  _401_jsp.class
                                  _401_jsp.java
                                  _404_jsp.class
                                  _404_jsp.java
             manager
              org
                  apache
                      jsp
                          WEB_002dINF
                              jsp
                                  _401_jsp.class
                                  _401_jsp.java
             ROOT
                 org
                     apache
                         jsp
                             index_jsp.class
                             index_jsp.java

131 directories, 657 files

tags: #other