Using Snaffler to Find Files
Kind of like ShareFinder or FileFinder whose names I’m putting here so you find this file when you search for them.
Three places to get It
- At Home (with obfuscation): https://git.nopsled.me/kavery/tool-pipeline/-/jobs/artifacts/master/download?job=snaffler
- See also Tool Obfuscation Pipeline
- Afar (compiled to exe for you): https://github.com/Flangvik/SharpCollection/blob/master/NetFramework_4.0_x64/Snaffler.exe
- The actual project (compile it yourself): https://github.com/SnaffCon/Snaffler
How to Run It
Where the readme says you shouldn’t just drop it on the domain-joined system and run it, it is lying to you. That’s exactly what you do. Run
snaffler.exe -s -o snaffler.log
…to use the default rules to find files on any shares on the domain you’re on as the user you’re authenticated as. The default rules seem pretty great so far.