Enumerate hosts that have the WebClient service running using a list with predefined hostnames or IP addresses. The list is loaded from your own attacker system.
A valid list with hostnames is considered newline separated and ends with a newline. Furthermore, the following hostname notations are correct:
database,database.example.local,10.100.10.1.
<path to file>: the path on your own attacker system to the file containing the list with predefined hostnames.debug: optional argument to include hostnames in the output that couldn't be reached or on which the WebClient was not running.
enumwebclient <path to hostname file> [opt:debug]
enumwebclient C:\Users\RTO\Documents\hostnames.txtenumwebclient C:\\Users\RTO\Documents\hostnames.txt debug
- 1. Make sure Visual Studio is installed and supports C/C++.
- 2. Open the
x64 Native Tools Command Prompt for VS <2019/2022>terminal. - 3. Run the
bofcompile.batscript to compile the object file. - 4. In Cobalt strike, use the script manager to load the .cna script to import the tool.
This project is based on the GetWebDAVStatus BOF and created as a more user friendly version.