Download Tomcat "Core" zip file from: http://tomcat.apache.org/. project, right click on the WebContent folder, select New > JSP file to create a new .jsp file. Scripting elements (Java code): Declarations, Scriptlets, Expressions; Actions: To Upload .jsp file into web tree - jsp code executed as the web user; Upload .gif file Upload .exe file into web tree - victims download trojaned executable; Upload a folder that its name ends with the script's extension (e.g. “folder.asp\file.txt”). Learn how to handle file uploads in your server code. We can then use that data to render HTML from a servlet or JSP file. but for now we just store it to the WebContent/uploaded-files folder, inside our web app directory. clicking the link will either display the contents of the file in the browser, or download the file. Upload .jsp file into web tree - jsp code executed as the web user; Upload .gif file Upload .exe file into web tree - victims download trojaned executable; Upload a folder that its name ends with the script's extension (e.g. “folder.asp\file.txt”). write jsp code. Hide Copy Code.