wafflesexploits/httpserver-plus

An improved version of Python's http.server, created for redirection purposes.

HTTPServer Plus

-> An improved version of Python's http.server, created for redirection purposes.

I’m sharing this script because I found it incredibly useful, and I hope many of you will too. Feel free to share any improvements or suggestions. Happy Hacking!

Description

When I was perfoming a penetration test, I needed to host HTML files because the default Python server was downloading the files instead of rendering them. Additionally, the URLs couldn't contain dots. To solve this, I created a simple script to redirect users to specific HTML pages.

As shown in the image below, you can define routes. For example, if the user navigates to localhost/about, they will be redirected to localhost/about.html. This allows you to use clean URLs while still pointing to the desired HTML files.

In the image below, you'll notice that the user received a 200 status code despite visiting /about instead of /about.html. This is because the user got redirected.

You can run the server with HTTPS, by using a self-signed certificate:

Note: In the images above, I'm running a bash file named httpserver that runs httpserver_plus.py. This is the bash file contents:

python3 /path/to/python/script/httpserver_plus.py $@

Usage

usage: httpserver-plus.py [-h] [-p PORT] [-d DIRECTORY] [-sc [SSL_CERTIFICATE]] [-sk [SSL_KEY]]

An improved version of Pythons http.server, created for redirection purposes.

Rerout Example: localhost/about -> localhost/about.html

options:
  -h, --help            show this help message and exit
  -p PORT, --port PORT  Specify Port to use.
  -d DIRECTORY, --directory DIRECTORY
                        Specify directory where .html pages are stored.
  -sc [SSL_CERTIFICATE], --ssl-certificate [SSL_CERTIFICATE]
                        Specify the path to SSL's .cert file, to use HTTPS.
  -sk [SSL_KEY], --ssl-key [SSL_KEY]
                        Specify the path to SSL's .key file, to use HTTPS.

[HTTP Usage Example]
 sudo python3 httpserver_plus.py -p <PORT> -d <path-to-directory-with-html-files>

[HTTPS Usage Example]
 1. Generate a self-signed SSL Certificate.
  openssl req -new -newkey rsa:4096 -x509 -sha256 -days 365 -nodes -out public.crt -keyout private.key
 2. Run the script with -sc and -sk flags.
  sudo python3 httpserver_plus.py -p <PORT> -d "<path-to-directory-with-html-files>" -sc "<path-to-server.crt-file>" -sk "<path-to-server.key-file>"