Skip to content
attack.paths
Sign in
← LibraryTechnique entry
W-WEBDAV-PUTInitial Access

WebDAV PUT to Drop Shell

Mis-configured WebDAV / IIS lets unauthenticated PUT — drop an .aspx / .ashx webshell.

§ Where this technique fits

W-WEBDAV-PUT is catalogued under the Initial Access tactic of the offensive-security kill-chain. It appears in 0 approved dossiers in the registry, typically.