WebDAV
Web Distributed Authoring and Versioning is an extension of HTTP that allows clients to perform remote web content authoring, enabling users to collaboratively edit and manage files on remote web servers.
It enables users to collaboratively edit and manage files on remote web servers.
In the context of cybersecurity, WebDAV has been observed being abused by attackers as a delivery mechanism for malware. Attackers exploit WebDAV by hosting malicious files on WebDAV-enabled servers, tricking users into accessing and executing these files.
This technique is particularly effective because WebDAV traffic is often allowed through corporate firewalls and web proxies since it uses standard HTTP/HTTPS protocols. The abuse of WebDAV for malware delivery is a technique that has been observed in various cyber attack campaigns.
