开发者

Sending a file via POST using raw HTTP (PuTTY)

开发者 https://www.devze.com 2023-04-07 06:49 出处:网络
If I set up an HTML page with the following form: <html> <body> <form action=\"upload_file.php\"

If I set up an HTML page with the following form:

<html>

    <body>
        <form action="upload_file.php"
              method="post"
              enctype="multipart/form-data">

            <label for="file">Filename:</label>
            <input type="file" name="file" id="file" />
            <br />
            <input type="submit" name="submit" value="Submit" />
        </form>
    </body>

</html>

I can upload a fi开发者_高级运维le to upload_file.php where I can handle it using a PHP script.

For testing purposes, I need to do the same using raw HTTP via a PuTTY session.

I can do a normal POST (just sending text data) this way:

POST /test_post.php HTTP/1.1
Host: example.com
User-Agent: Mozilla/5.0
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
Content-Length: 11

name=myname

How can I send a file this way?


You have to use multipart content-type and encode the file data into hex/binary

Try the following in telnet:

POST /the_url HTTP/1.1
User-Agent: Mozilla
Host: www.example.com
Content-Length: xxxx
Content-Type: multipart/form-data; boundary=--------------------31063722920652
------------------------------31063722920652
Content-Disposition: form-data; name="a"

value_for_a
------------------------------31063722920652
Content-Disposition: form-data; name="b"

value_for_b
------------------------------31063722920652
Content-Disposition: form-data; name="c"; filename="myfile.txt"
Content-Type: text/plain

            This is a test 
            and more

-----------------------------31063722920652
Content-Disposition: form-data; name="submit"

Submit
-----------------------------31063722920652--

Remember that an extra newline is necessary between field name and its data. Also, update the Content-Length value.


Open a port with netcat and save the incoming request:

nc -l -p 1090 > income-http.txt

Then modify your form to send the data to the netcat:

<form action="http://localhost:1090/upload_file.php" 
    method="post" enctype="multipart/form-data">

Submit the form from your browser. You can find the full raw request with the contents of the file in the income-http.txt file.

Saving the income-http.txt is an one-time activity. Later you can send the saved request out any times. Please note that you should edit the Host: header in the saved txt.

0

精彩评论

暂无评论...
验证码 换一张
取 消