We can run a web server that accepts uploads using Python3’s uploadserver module:

pip3 install uploadserver

python -m uploadserver
File upload available at /upload
Serving HTTP on 0.0.0.0 port 8000 (http://0.0.0.0:8000/) ...

HTTPS#

# attacker
sudo python3 -m pip install --user uploadserver

# Create a Self-Signed Certificate
openssl req -x509 -out ~/server.pem -keyout server.pem -newkey rsa:2048 -nodes -sha256 -subj '/CN=server'

The web server shouldn’t host the certificate. We should run uploadserver in a different directory than ~:

# attacker
mkdir upload && cd upload
sudo python3 -m uploadserver 443 --server-certificate ~/server.pem