Awesome

GetWebDAVStatus

Small project to determine if the Web Client service (WebDAV) is running on a remote system by checking for the presence of the DAV RPC SERVICE named pipe. Does not require admin privileges on the remote system, but does require some form of valid credentials (no anonymous access). Both a BOF and C# version of the project are included, the C# version is multi-threaded so would be better suited for scanning a large number of systems.

Usage

Both the BOF and C# versions take a comma-seperated list of systems to scan. The C# version also has an optional arg of "--tc" that allows the operator to control the max amount of threads to be used (default: 5).

BOF: inline-execute C:\scripts\GetWebDAVStatus_x64.o server01,server02

C#: execute-assembly C:\assemblies\GetWebDAVStatus.exe server01,server02 --tc 1

Building

The C# project should be a pretty standard build, x64 + Release is the recommended build configuration. BOF can be built with the following command from the Developer Command Prompt for VS:

cl.exe /c /GS- Source.c /Fo./GetWebDAVStatus_x64.o

Credits

@tifkin_ originally posted about this method of remotely identifying WebDAV here.

Originally heard about the above tweet on @flangvik's twitch stream. Would definitely recommend checking out.