checks if /_vti_bin/_vti_aut/author.dll exists on the website. it's just a script that I wrote for fun

script.py

#!/usr/bin/python3

import requests
import re

rhost=''

if len(rhost) == 0:
  print("Specify IP in rhost @line 6")
  exit


sess = requests.Session()

headers_infHTML = {
    'TE' : 'deflate,gzip;q=0.3',
    'Keep-Alive': '300',
    'Connection': 'Keep-Alive, TE',
    'Host' : rhost,
    'User-Agent' : 'Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)'
}

response = sess.get('http://' + rhost + '/_vti_inf.html', headers=headers_infHTML)

FPVersion = str(re.findall(r"FPVersion=\"(\d.\d.\d.\d{0,8})",str(response.content)))[2:-2]


method = "method=open+service:" + FPVersion + "&service_name=/"

headers_vti_aut = {
    'TE' : 'deflate,gzip;q=0.3',
    'Keep-Alive': '300',
    'Connection': 'Keep-Alive, TE',
    'Host' : rhost,
    'User-Agent' : 'Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)',
    "Content-Type": "application/x-www-form-urlencoded",
    "X-Vermeer-Content-Type" : "application/x-www-form-urlencoded",
    "Content-Length" :  str(len(method))  + "\r\n\r\n" + method + "\r\n\r\n"
}

response2 = sess.post('http://' + rhost + '/_vti_bin/_vti_aut/author.dll')

if response2.content == 200:
    print("FrontPage access is allowed")