title: Upload shell in tomcat exception
body: <p>I'm a security consultant and i'm currently doing a pentest for a client who has a Tomcat with default credentials. I want to make understand the problem of this to my client and i've searching around a few WAR shells out there but none of them seems to work.</p>
  
  <p>When i upload any WAR shell such as this one:</p>
  
  <p><a href="https://github.com/danielmiessler/SecLists/blob/master/Scripts/Backdoors/Web%20Backdoors/laudanum-0.8/jsp/cmd.war" rel="nofollow">https://github.com/danielmiessler/SecLists/blob/master/Scripts/Backdoors/Web%20Backdoors/laudanum-0.8/jsp/cmd.war</a></p>
  
  <p>I recieve the following error no matter what shell i upload:</p>
  
  <pre><code>HTTP Status 500 -
  
  type Exception report message description The server encountered an internal error () that prevented it from fulfilling this request.
  
  exception
  
  javax.servlet.ServletException: java.lang.AbstractMethodError: javax.servlet.jsp.JspFactory.getJspApplicationContext(Ljavax/servlet/ServletContext;)Ljavax/servlet/jsp/JspApplicationContext;
  org.apache.jasper.servlet.JspServlet.service(JspServlet.java:268)
  javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
  
  root cause
  
  java.lang.AbstractMethodError: javax.servlet.jsp.JspFactory.getJspApplicationContext(Ljavax/servlet/ServletContext;)Ljavax/servlet/jsp/JspApplicationContext;
  org.apache.jsp.cmd_jsp._jspInit(cmd_jsp.java:24)
  org.apache.jasper.runtime.HttpJspBase.init(HttpJspBase.java:52)
  org.apache.jasper.servlet.JspServletWrapper.getServlet(JspServletWrapper.java:164)
  org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:340)
  org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:313)
  org.apache.jasper.servlet.JspServlet.service(JspServlet.java:260)
  javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
  </code></pre>
  
  <p>Any ideas why this or any other JSP shells aren't working here? It used to work for me on other scenarios when using Tomcat.</p>
  
  <p>It's a Tomcat 6.0.5.</p>
  
  <p>Thanks a lot.</p>
  
  <p><strong>UPDATE:</strong>
  When trying to upload this file: <a href="http://www.vonloesch.de/files/browser.zip" rel="nofollow">http://www.vonloesch.de/files/browser.zip</a>
  With the following web.xml:</p>
  
  <pre><code>&lt;?xml version="1.0" encoding="ISO-8859-1"?&gt;
  
  &lt;!DOCTYPE web-app 
  PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN" 
  "http://java.sun.com/dtd/web-app_2_3.dtd"&gt;
  
  &lt;web-app&gt;
  
  &lt;servlet&gt;
    &lt;servlet-name&gt;browser&lt;/servlet-name&gt;
  &lt;/servlet&gt;
  
  &lt;/web-app&gt;
  </code></pre>
  
  <p>I'm still getting the same error.</p>