unknown d9e23d7f7b New tool update		2 vuotta sitten
..
README.md	d9e23d7f7b New tool update	2 vuotta sitten
beacon.h	d9e23d7f7b New tool update	2 vuotta sitten
bofcompile.bat	d9e23d7f7b New tool update	2 vuotta sitten
findwebclient.c	d9e23d7f7b New tool update	2 vuotta sitten
findwebclient.cna	d9e23d7f7b New tool update	2 vuotta sitten
findwebclient.h	d9e23d7f7b New tool update	2 vuotta sitten
findwebclient.o	d9e23d7f7b New tool update	2 vuotta sitten

CredPrompt

Find hosts with the WebClient service running based on a list of predefined hostnames or IP addresses. The list is loaded from your own attacker system.

A valid list with hostnames is considered newline separated and ends with a newline. Furthermore, the following hostname notations are correct: database, database.example.local, 10.100.10.1.

Arguments

<path to file>: the path on your own attacker system to the file containing the list with predefined hostnames.
debug: optional argument to include hostnames in the output that couldn't be reached or on which the WebClient was not running.

Usage

findwebclient <path to hostname file> [opt:debug]

Examples

findwebclient C:\Users\redmed\Documents\hostnames.txt
findwebclient C:\\Users\\redmed\\Documents\\hostnames.txt debug

Compile

1. Make sure Visual Studio is installed and supports C/C++.
2. Open the x64 Native Tools Command Prompt for VS <2019/2022> terminal.
3. Run the bofcompile.bat script to compile the object file.
4. In Cobalt strike, use the script manager to load the .cna script to import the tool.

Credits

This project is based on the GetWebDAVStatus BOF and created as a more user friendly version.