SimpleHTTPserver of Python is an easy way to create a HTTP Server in a directory:

python -m SimpleHTTPServer 80

Also an NGINX instance with Directory Listing enabled is another possibility.

But now we also have Swego, written in Go, fully packed with cool features. It came on my radar one year ago, and I forgot the name of this project. Up until know it was lost, but recently I re-discovered it.

Features:

  • HTTPS (auto generate certificate / key if no certificate / key specified)
  • Directory listing
  • Define a private folder with basic authentication
  • Upload multiple files
  • Download file as an encrypted zip (password: infected)
  • Download folder with a zip
  • Embedded files
  • Run embedded binary written in C# (only available on Windows)
  • Create a folder from the browser
  • Ability to execute embedded binary
  • Feature for search and replace (for fill the IP address in reverse shell for example)
  • Generate one-liners to download and execute a embedded file
  • Config file.
  • Auto generate random certificate for TLS

Especially the search and replace for text based files can be very useful for pentesters.

You can find the repository here: https://github.com/nodauf/Swego