Webdav

Webdav is a set of extensions to HTTP, which allows users to work collaboratively and author document hosted from a web server. The benefit of this service is that it appears as another folder to a user when the link is opened. This can be effectively used to trick a user to open the folder and run a malicious file. This is widely used in sending convincing phishing emails which contains link to such folders.

Webdav can be installed in kali by following the instructions in the following page,

Once installed files can be placed within the home directory and the service can be started using the following command,

/home/kali/.local/bin/wsgidav --host=0.0.0.0 --port=80 --auth=anonymous --root /home/kali/webdav

The above command starts the service to listen on all IPs and port 80 with an anonymous login.

Last updated