Reversing Java web applications

Useful configuration files Java web applications map API routes to Java servlets, as described in our Source code analysis methodology notes. The default location Java web applications store their Java servlet mappings is: web.xml No guaranteed which folder this can typically be found in, but be on the lookout for this configuration file in a Java web application.