The output directory is always C:\ with -m

[Luct0r]

Hey there, amazing tool - really great work!

One thing that has confused me is when I use -m and provide a directory it always seems to put interesting files in C:\ instead?

Not a big deal and I'm probably doing something wrong but curious nonetheless.

Thanks

[l0ss]

Hey i finally got around to testing this and I can't reproduce it. Is this still happening?

[checkymander]

I can second this I'm getting the same result with the following command and a fresh snaffler:

Snaffler.exe -i \\<ip>\Shared -o snafflog.log -m C:\users\checkymander\Desktop\SnafflerOut\

and I get a new folder in C:\

[jeffmcjunkin]

I had the same experience today. Invocation was: Snaffler.exe -s -o snaffler-log.txt -m -x 12, and the output folders (one per destination computer) were made at the root of the C drive.

[omnifocal]

+1 This has always been the case for me and I've never known why

[7MinSec]

Adding a "me too!" here. I did snaffler.exe -s -o snaffy.log -m dump thinking stuff would dump in my dump folder, but it's all going to C:\

[MacGovery]

Adding a "me too!" here. I did C:\temp\Snaffler\Snaffler.exe -s -o C:\temp\Snaffler\snaffler.log -v trace -i \\host\share -p C:\temp\Snaffler\SnaffRules -m C:\temp\Snaffler\Found. Nothing in C:\temp\Snaffler\Found but i do have the folders in C:\

[mplattner]

Same for me. Using .\snaffler.exe -s -m ".\files\" -o sna-withfiles.log while being in a subdirectory of C:/myfolder/. A separate directory for each machine is created under C:/.

[7MinSec]

Thank you!

[mplattner]

Great news, thanks! 👍

[jeffmcjunkin]

Woot!