WebDAV Covert Channel
A covert channel technique that uses WebDAV protocol features to deliver malicious payloads and establish C2 communication while bypassing security controls.
WebDAV Covert Channel
A covert channel technique that uses WebDAV protocol features to deliver malicious payloads and establish C2 communication while bypassing security controls.
Data verified May 2026
ADYour product here. Reach security decision-makers.Launch a campaignWebDAV Covert Channel Description
WebDAV Covert Channel is a technique that exploits WebDAV protocol features to establish covert communication channels and deliver malicious payloads. The tool leverages WebDAV's legitimate functionality to bypass traditional security controls including intrusion detection systems (IDS), intrusion prevention systems (IPS), and antivirus solutions. Key capabilities include: - Establishing command and control (C2) communication through WebDAV protocol - Operating entirely in memory to avoid disk-based detection mechanisms - Maintaining proxy compatibility for environments with network restrictions - Providing DFIR-friendly characteristics that can evade forensic analysis - Delivering payloads through legitimate-appearing WebDAV traffic The technique takes advantage of WebDAV's file sharing and collaboration features to mask malicious activities within normal network traffic patterns. By operating through established protocols, it can blend with legitimate business communications and avoid triggering security alerts.
WebDAV Covert Channel FAQ
Common questions about WebDAV Covert Channel including features, pricing, alternatives, and user reviews.
WebDAV Covert Channel is A covert channel technique that uses WebDAV protocol features to deliver malicious payloads and establish C2 communication while bypassing security controls. It is a Security Operations solution designed to help security teams with C2, Red Team, Evasion.
WebDAV Covert Channel is a free Security Operations tool. This makes it accessible for organizations of all sizes, from startups to enterprises. Visit https://arno0x0x.wordpress.com/2017/09/07/using-webdav-features-as-a-covert-channel/ for download and installation instructions.
Popular alternatives to WebDAV Covert Channel include:
1.Core Security Outflank Security Tooling - Red team toolkit for EDR evasion, initial access, and post-exploitation. (Commercial)
2.Havoc Framework - Open-source C2 framework for red team ops and adversary simulation. (Free)
3.SourcePoint - SourcePoint generates customizable C2 profiles for Cobalt Strike servers to enhance evasion capabilities against security defenses. (Free)
4.InvalidSign - InvalidSign is a security research tool that bypasses endpoint solutions by obtaining valid signed files with different hashes to evade signature-based detection mechanisms. (Free)
5.Core Security Cobalt Strike - Post-exploitation threat emulation platform for red team operations. (Commercial)
Compare all WebDAV Covert Channel alternatives at https://cybersectools.com/alternatives/webdav-covert-channel
WebDAV Covert Channel is for security teams and organizations that need C2, Red Team, Evasion, Bypass, Protocol. It's particularly suitable for small to medium-sized teams looking for cost-effective solutions. Other Security Operations tools can be found at https://cybersectools.com/categories/security-operations
Have more questions? Browse our categories or search for specific tools.
