Nmap NSE port of webclientenum

smb-webclientenum.nse

local smb = require "smb"
local stdnse = require "stdnse"
local string = require "string"

description = [[
    Port of @zyn3rgy's webclientenum
]]

-- nmap --script=smb-webclientenum.nse --script-args=smbuser=<username>,smbpass=<password>,smbbasic=1,smbsign=force <host>

author = "Max Harley"
copyright = "Max Harley"
license = "Same as Nmap--See https://nmap.org/book/man-legal.html"
categories = {"discovery","intrusive"}
dependencies = {}


hostrule = function(host)
  return smb.get_port(host) ~= nil
end

action = function(host)
  local status, err

  status, err = smb.file_read(host, 'IPC$', 'DAV RPC Service')

  if err then
    stdnse.debug(1, "webclientenum: %s", err)
  end

  if status then
    stdnse.debug(1, '%s: WebDAV RPC Service found', host.ip)
  else
    stdnse.debug(1, '%s: WebDAV RPC Service not found', host.ip)
  end

end