Locked HTTPUploadExfil: HTTP server for exfiltrating files/data

[itsMe]

This is the hidden content, please

• Sign In
• or
• Sign Up

HTTPUploadExfil

HTTPUploadExfil is a (very) simple HTTP server written in Go that’s useful for getting files (and other information) off a machine using HTTP. While there are many use-cases, it’s meant to be used in low-stakes offensive scenarios (e.g., CTFs).

Think of this as python3 -m http.server but for getting data off a machine instead of on the machine.

Obviously, this is a very loud and somewhat restricted way of exfiltrating data. Nevertheless, it’s quite handy and somewhat easier than, for example, using SMB or FTP. If you are looking for something more elegant, have a look at, for example, dnsteal or PyExfil.

This is the hidden content, please

• Sign In
• or
• Sign Up