Rednote
GuidebooksTerminalCode
  • Welcome!
  • Utility
    • General
    • Server
    • Transferring File
      • Main
      • Code
      • Miscellaneous
    • Reverse & Bind Shells
      • Havoc
    • Metasploit
    • Service
      • FTP (21)
      • SSH (22)
      • DNS (53)
      • HTTP/HTTPS (80-443)
      • SMTP (25-465-587)
      • POP3 (110-995)
      • IMAP (143-993)
      • MySQL (3306)
      • MSSQL (1433-2433)
      • SMB (139-445)
      • RDP (3389)
      • WinRM (5985-5986)
      • WMI (135)
      • LLMNR & NBT-NS (5355-137)
      • NFS (111-2049)
      • SNMP (161-162)
      • VNC (5900)
      • Rsync (873)
      • R-Service (512-513-514)
      • IPMI (623)
      • Oracle TNS (1521)
  • Pentesting Process
    • Information Gathering
      • Passive
      • Active
      • OSINT
    • Vulnerability
    • Web Attacks
      • GENERAL
      • Crawling/Spidering & Fuzzing
      • Information Disclosure
      • Command Injection
      • Unrestricted File Upload
      • File Inclusion/Path Traversal
      • Request Smuggling
      • Clickjacking
      • Web Cache Poisoning
      • Web Cache Deception
      • Insecure Deserialization
      • Prototype Pollution
      • OAuth 2.0
      • JWT
      • SQLi
        • sqlmap
      • NoSQLi
      • GraphQL
      • XSS
      • SSRF
      • XXE
      • IDOR
      • API
      • SSTI
      • CSRF
      • CORS
      • AJP
      • SSI
      • ESI
      • XSLT
      • Cloud
      • LLM Prompt Security
    • Software Attacks
      • Binary
      • Shellcode
      • AV Evasion & Obfuscation
    • Network Attacks
      • ARP Poisoning
      • Local DNS Cache Poisoning
      • Baby Local DoS
    • Crypto Attacks
      • Utility
      • RSA
      • DSA/DSS
      • PRNG
        • LGC
        • MT
        • LFSR
    • Misc Attacks
    • Social Engineering
    • Password Cracking
      • Wordlist
      • Offline
      • Online
    • Pivoting & Tunneling
    • Local Enumeration
      • Linux
      • Windows
    • Privilege Escalation
      • Linux
        • Linux Privilege Escalation with Groups
        • Linux Privilege Escalation with Library
      • Windows
        • Windows Privilege Escalation with Groups and Privileges
        • Windows Privilege Escalation with DLL Hijacking
    • Active Directory
      • Enumeration
      • Abuse ACL
      • Extract Hash & Password
      • Pass The Hash
      • Pass The Ticket
      • Overpass the Hash
      • Relay Attack
      • Password Spraying Attack
      • AS-REP Roasting
      • Kerberoasting
      • Silver Ticket
      • Golden Ticket
      • DC Synchronization
      • AD Certificates
      • Attacking Domain Trusts
    • Reports
      • Bug Bounty Report
    • CVE
      • Linux
      • Windows
    • OTHER
      • CMS
        • WordPress
        • Joomla
        • Drupal
      • Tomcat
      • Jenkins
      • Splunk
      • Web Service
      • Navigating Python Objects
      • JavaScript Deobfuscation
  • Extra
    • My Books
    • My Exploits
    • Compiled Binaries
Powered by GitBook
On this page
  • Public to the World
  • Python
  • SMB
  • FTP
  • PHP
  • Ruby
  • npm
  • WebDAV

Was this helpful?

  1. Utility

Server

Last updated 8 months ago

Was this helpful?

Public to the World

ngrok http <PORT>
ngrok tcp <PORT>

With tcp I can use the IP (nslookup).

ssh -R 80:localhost:<PORT> serveo.net

Python

python -m SimpleHTTPServer <PORT>
python3 -m http.server <PORT>

Download uploadserver:

pip3 install uploadserver

Run:

python3 -m uploadserver

Create self-signed certificate:

mkdir https && cd https
openssl req -x509 -out server.pem -keyout server.pem -newkey rsa:2048 -nodes -sha256 -subj '/CN=server'
python3 -m uploadserver 443 --server-certificate ./server.pem

SMB

.

impacket-smbserver -smb2support <NAME_SHARE> <PATH>

You can add authentication with:

-user <USER> -password <PASS>

You can access it in Windows with:

\\<OUR_IP>\<NAME_SHARE>\<FILE>
move <FILE_IN_WINDOWS> \\<OUR_IP>\<NAME_SHARE>

FTP

Allows anonymous authentication by default.

Download twisted:

sudo pip3 install twisted

Run:

sudo python3 -m twisted ftp -p 21 -r .

Download pyftpdlib:

sudo pip3 install pyftpdlib

Run:

sudo python3 -m pyftpdlib --port 21 [--write]
ftp://<IP>/
ftp://<USER>:<PASS>@<IP>/

PHP

sudo php -S 0.0.0.0:<PORT>

File index.php is the default.

Ruby

ruby -run -ehttpd . -p<PORT>

npm

Via Node Package Manager, the package manager for JavaScript Node.js

npm install http-server -g

Run:

http-server -p <PORT>

WebDAV

Download:

sudo pip3 install wsgidav cheroot

Run:

sudo wsgidav --host=0.0.0.0 --port=80 --root=<PATH> --auth=anonymous

Supporting collaborative content creation.

Download impacket-smbserver