Client-Side Exploitation: abusing WebDAV+URL+LNK to Deliver Malicious Payloads

A look at the offensive and defensive angles. 

What is WebDav? 

Attackers often place malicious payloads on remote servers, which are then downloaded and executed on the user’s PC using scripts or other methods. One type of server attackers can leverage is WebDAV (Web Distributed Authoring and Versioning) — a file transfer protocol built on top of HTTP. 

In this article, we’ll explore how an attack is carried out from the offensive perspective, and then examine how to detect and …

abusing attackers can client client-side defensive distributed exploitation file file transfer lnk malicious malicious payloads offensive payloads scripts server servers transfer url versioning web webdav what is