{"id":226,"date":"2021-04-25T03:49:26","date_gmt":"2021-04-25T03:49:26","guid":{"rendered":"https:\/\/sirensecurity.io\/blog\/?p=226"},"modified":"2021-07-15T03:04:25","modified_gmt":"2021-07-15T03:04:25","slug":"cadaver-webdav","status":"publish","type":"post","link":"https:\/\/sirensecurity.io\/blog\/cadaver-webdav\/","title":{"rendered":"Cadaver \/ DAVTest & Webdav."},"content":{"rendered":"\n
\"\"
\n

S1REN<\/p>\n\n\n\n

root@kali:\/# cadaver
dav:!><\/p>\n\n\n\n

<\/p>\n\n\n\n

Unix command lines and WebDAV Clients.<\/p>\n<\/div><\/div>\n\n\n\n

DAVTest<\/strong><\/p>\n\n\n\n

https:\/\/tools.kali.org\/web-applications\/davtest<\/a>
Example Usage:<\/strong>

root@kali:~# davtest -url<\/strong> http:\/\/192.168.1.209
********************************************************
 Testing DAV connection
OPEN        SUCCEED:        http:\/\/192.168.1.209
********************************************************
NOTE    Random string for this session: B0yG9nhdFS8gox
********************************************************
 Creating directory
MKCOL       SUCCEED:        Created http:\/\/192.168.1.209\/DavTestDir_B0yG9nhdFS8gox
********************************************************
 Sending test files
PUT asp FAIL
PUT cgi FAIL
PUT txt SUCCEED:    http:\/\/192.168.1.209\/DavTestDir_B0yG9nhdFS8gox\/davtest_B0yG9nhdFS8gox.txt
PUT pl  SUCCEED:    http:\/\/192.168.1.209\/DavTestDir_B0yG9nhdFS8gox\/davtest_B0yG9nhdFS8gox.pl
PUT jsp SUCCEED:    http:\/\/192.168.1.209\/DavTestDir_B0yG9nhdFS8gox\/davtest_B0yG9nhdFS8gox.jsp
PUT cfm SUCCEED:    http:\/\/192.168.1.209\/DavTestDir_B0yG9nhdFS8gox\/davtest_B0yG9nhdFS8gox.cfm
PUT aspx    FAIL
PUT jhtml   SUCCEED:    http:\/\/192.168.1.209\/DavTestDir_B0yG9nhdFS8gox\/davtest_B0yG9nhdFS8gox.jhtml
PUT php SUCCEED:    http:\/\/192.168.1.209\/DavTestDir_B0yG9nhdFS8gox\/davtest_B0yG9nhdFS8gox.php
PUT html    SUCCEED:    http:\/\/192.168.1.209\/DavTestDir_B0yG9nhdFS8gox\/davtest_B0yG9nhdFS8gox.html
PUT shtml   FAIL
********************************************************
 Checking for test file execution
EXEC    txt SUCCEED:    http:\/\/192.168.1.209\/DavTestDir_B0yG9nhdFS8gox\/davtest_B0yG9nhdFS8gox.txt
EXEC    pl  FAIL
EXEC    jsp FAIL
EXEC    cfm FAIL
EXEC    jhtml   FAIL
EXEC    php FAIL
EXEC    html    SUCCEED:    http:\/\/192.168.1.209\/DavTestDir_B0yG9nhdFS8gox\/davtest_B0yG9nhdFS8gox.html<\/p>\n\n\n\n

********************************************************<\/strong>
\/usr\/bin\/davtest Summary:<\/strong>
Created: http:\/\/192.168.1.209\/DavTestDir_B0yG9nhdFS8gox
PUT File: http:\/\/192.168.1.209\/DavTestDir_B0yG9nhdFS8gox\/davtest_B0yG9nhdFS8gox.txt
PUT File: http:\/\/192.168.1.209\/DavTestDir_B0yG9nhdFS8gox\/davtest_B0yG9nhdFS8gox.pl
PUT File: http:\/\/192.168.1.209\/DavTestDir_B0yG9nhdFS8gox\/davtest_B0yG9nhdFS8gox.jsp
PUT File: http:\/\/192.168.1.209\/DavTestDir_B0yG9nhdFS8gox\/davtest_B0yG9nhdFS8gox.cfm
PUT File: http:\/\/192.168.1.209\/DavTestDir_B0yG9nhdFS8gox\/davtest_B0yG9nhdFS8gox.jhtml
PUT File: http:\/\/192.168.1.209\/DavTestDir_B0yG9nhdFS8gox\/davtest_B0yG9nhdFS8gox.php
PUT File: http:\/\/192.168.1.209\/DavTestDir_B0yG9nhdFS8gox\/davtest_B0yG9nhdFS8gox.html
Executes: http:\/\/192.168.1.209\/DavTestDir_B0yG9nhdFS8gox\/davtest_B0yG9nhdFS8gox.txt
Executes: http:\/\/192.168.1.209\/DavTestDir_B0yG9nhdFS8gox\/davtest_B0yG9nhdFS8gox.html<\/p>\n\n\n\n

********************************************************<\/strong><\/p>\n\n\n\n

+ Cadaver<\/span><\/strong>
carnal0wnage<\/a><\/strong> WebDAV:<\/strong>
+ http:\/\/www.carnal0wnage.com\/papers\/dirtysecrets-v2-derbycon2012.pdf<\/a>
net use \\ip\\documents\\ \/User:Guest
copy \\ip\\documents\\myexe.exe myexe.exe

<\/p>\n","protected":false},"excerpt":{"rendered":"

DAVTest https:\/\/tools.kali.org\/web-applications\/davtestExample Usage: root@kali:~# davtest -url http:\/\/192.168.1.209******************************************************** Testing DAV connectionOPEN        SUCCEED:        http:\/\/192.168.1.209********************************************************NOTE    Random string for this session: B0yG9nhdFS8gox******************************************************** Creating directoryMKCOL       SUCCEED:        Created http:\/\/192.168.1.209\/DavTestDir_B0yG9nhdFS8gox******************************************************** Sending test filesPUT asp FAILPUT cgi FAILPUT txt SUCCEED:    http:\/\/192.168.1.209\/DavTestDir_B0yG9nhdFS8gox\/davtest_B0yG9nhdFS8gox.txtPUT pl  SUCCEED:    http:\/\/192.168.1.209\/DavTestDir_B0yG9nhdFS8gox\/davtest_B0yG9nhdFS8gox.plPUT jsp SUCCEED:    http:\/\/192.168.1.209\/DavTestDir_B0yG9nhdFS8gox\/davtest_B0yG9nhdFS8gox.jspPUT cfm SUCCEED:    […]<\/p>\n","protected":false},"author":1,"featured_media":232,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[21,26,25,22,17,4,24,23],"class_list":["post-226","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-s1ren","tag-cadaver","tag-carnal0wnage","tag-command-line","tag-davtest","tag-kali-linux","tag-s1ren","tag-uniz-client","tag-webdav"],"_links":{"self":[{"href":"https:\/\/sirensecurity.io\/blog\/wp-json\/wp\/v2\/posts\/226","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sirensecurity.io\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sirensecurity.io\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sirensecurity.io\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sirensecurity.io\/blog\/wp-json\/wp\/v2\/comments?post=226"}],"version-history":[{"count":3,"href":"https:\/\/sirensecurity.io\/blog\/wp-json\/wp\/v2\/posts\/226\/revisions"}],"predecessor-version":[{"id":419,"href":"https:\/\/sirensecurity.io\/blog\/wp-json\/wp\/v2\/posts\/226\/revisions\/419"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sirensecurity.io\/blog\/wp-json\/wp\/v2\/media\/232"}],"wp:attachment":[{"href":"https:\/\/sirensecurity.io\/blog\/wp-json\/wp\/v2\/media?parent=226"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sirensecurity.io\/blog\/wp-json\/wp\/v2\/categories?post=226"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sirensecurity.io\/blog\/wp-json\/wp\/v2\/tags?post=226"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}