Open WAR files in your browser
A Java web app as a server deploys it. Open one right here to see its servlets, its libraries and the Java it needs. Nothing leaves your device.
Or drop it anywhere on this page
What you'll see
Your app opens like a folder, its files listed on the left, with a page beside them on what it is, who signed it and what it asks for.
- Its signature • Checked inside your browser
- SHA-256 • Compare it or look it up on VirusTotal
- Heads-ups • What it asks for and what runs
- Its files • Manifests open as text
About WAR
A WAR is a JAR laid out for a Java web server such as Tomcat: WEB-INF/web.xml maps the app's servlets and filters to its addresses, WEB-INF/classes holds its own code, WEB-INF/lib the JARs it uses, and everything else is served as it is.
Servers deploy a WAR by unpacking it, so what's in WEB-INF/lib runs with the app's rights. WARs can be signed the way JARs are, though few are.
Filepeek reads web.xml for the app's servlets and the classes behind them, lists the JARs in WEB-INF/lib, each opening as a JAR of its own, and works out the Java version its classes need. It checks a signature when there is one.
Java web application archive
.war
Format
- MIME type
- application/java-archive
- Made by
- Sun Microsystems
- Released
- 1999
Inside the file
- Container
- ZIP
- Setup
- WEB-INF/web.xml
- Code
- WEB-INF/classes and WEB-INF/lib
- Pages
- Everything outside WEB-INF
Opens in every browser
No browser opens a WAR: they download it. Filepeek opens it as a folder in Chrome, Edge, Firefox and Safari.
- YouChromeOpens through Filepeek
- YouEdgeOpens through Filepeek
- YouFirefoxOpens through Filepeek
- YouSafariOpens through Filepeek
Questions
How do I see what a WAR holds?
Drop it on this page or choose Peek a WAR. A page shows the app's servlets, the libraries it uses and the Java it needs, and its files are listed like a folder.
Which libraries does a WAR use?
Filepeek lists every JAR in WEB-INF/lib, whose names usually carry their versions, and each opens as a JAR of its own with its manifest and Maven details.
How do I look up a WAR on VirusTotal?
Filepeek works out its SHA-256 inside your browser. Look up on VirusTotal opens VirusTotal's page for that hash, and only the hash goes, never the file. Compare checks it against a SHA-256, SHA-1 or MD5 you paste.
Does opening a WAR deploy it?
No. Filepeek only reads it: nothing in it runs, nothing is deployed and it never leaves your device.
Can I get files out of a WAR?
Yes. Pick any file on the left to open it. web.xml opens as XML. In Chrome and Edge on a computer, Export extracts them all into a folder.