In preparation for an upcoming blog post, I wondered about the various ways that Windows can refer to a remote WebDAV resource.

wdormann@infosec.exchange

These all work:

\\example.com\pwned.exe
\/example.com\pwned.exe
file://example.com\pwned.exe
file:/\example.com\pwned.exe
file:\/example.com\pwned.exe
file:\\example.com\pwned.exe
file:////example.com\pwned.exe
file:///\example.com\pwned.exe
file://\/example.com\pwned.exe
file://\\example.com\pwned.exe
file:/\//example.com\pwned.exe
file:/\/\example.com\pwned.exe
file:/\\/example.com\pwned.exe
file:/\\\example.com\pwned.exe
file:\///example.com\pwned.exe
file:\//\example.com\pwned.exe
file:\/\/example.com\pwned.exe
file:\/\\example.com\pwned.exe
file:\\//example.com\pwned.exe
file:\\/\example.com\pwned.exe
file:\\\/example.com\pwned.exe
file:\\\\example.com\pwned.exe

These don't, presumably because windows treats the leading / as meaning it comes from the local filesystem:

//example.com\pwned.exe
/\example.com\pwned.exe

zhenech@chaos.social

@wdormann the slashes ate doing a little dance there, in anticipation of being part of something big

winterknight1337@infosec.exchange

@wdormann this is disgusting.

gossithedog@cyberplace.social

@wdormann \\web.dav@ssl\blah too

wdormann@infosec.exchange

@GossiTheDog
At least in my case, that's covered by the \\example.com\pwned.exe case.

CIRCLE WITH A DOT

In preparation for an upcoming blog post, I wondered about the various ways that Windows can refer to a remote WebDAV resource.