[29362] in bugtraq
Simple WebDAV method validator (PERL code)
daemon@ATHENA.MIT.EDU (SensePost Research)
Tue Mar 18 19:01:47 2003
Date: Tue, 18 Mar 2003 00:29:08 +0200 (SAST)
From: SensePost Research <research@sensepost.com>
To: <bugtraq@securityfocus.com>
Message-ID: <Pine.BSF.4.33.0303180016110.37540-200000@GrasGroen.sensepost.com>
MIME-Version: 1.0
Content-Type: MULTIPART/MIXED; BOUNDARY="0-1454085597-1047940148=:37540"
--0-1454085597-1047940148=:37540
Content-Type: TEXT/PLAIN; charset=US-ASCII
A quick 10 minute job...
> head -n 9 finder.pl
#!/bin/perl
##
## This script test for most of the methods used by WebDAV
## If the server does not complain about the method its an indication
## that WebDAV is in use..
##
## Please see http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-007.asp
## for info why this is interesting..
##
Typical output:
> perl finder.pl www.blah.co.za 80
Testing WebDAV methods [www.blah.co.za 80]
-------------------------------------
www.blah.co.za : Server type is Microsoft-IIS/5.0
Method PROPFIND seems to be allowed - WebDAV possibly in use
Method PROPPATCH seems to be allowed - WebDAV possibly in use
Method MCOL seems to be allowed - WebDAV possibly in use
Method PUT seems to be allowed - WebDAV possibly in use
Method DELETE seems to be allowed - WebDAV possibly in use
Method LOCK seems to be allowed - WebDAV possibly in use
Method UNLOCK seems to be allowed - WebDAV possibly in use
> perl finder.pl www.moreblah.com 80
Testing WebDAV methods [www.moreblah.com 80]
-------------------------------------
www.moreblah.com : Server type is Microsoft-IIS/5.0
Method PROPFIND is not allowed
Method PROPPATCH is not allowed
Method MCOL is not allowed
Method PUT is not allowed
Method DELETE is not allowed
Method LOCK is not allowed
Method UNLOCK is not allowed
Enjoy/Butcher/Modify as you see fit.
----------------------------
SensePost Research
www.sensepost.com
research@sensepost.com
----------------------------
Disclaimer:
This information is believed to be correct and accurate at the time of
publishing. No warranty or any guarantee is given, directly, or implied as
to its accuracy or completeness. In no event shall the author or
SensePost be liable for any damages resulting from the use or abuse of
this information. The information contained in this correspondence may be
redistributed, provided it is not modified in any way or charged for.
--0-1454085597-1047940148=:37540
Content-Type: TEXT/PLAIN; charset=US-ASCII; name="finder.pl"
Content-Transfer-Encoding: BASE64
Content-ID: <Pine.BSF.4.33.0303180029080.37540@GrasGroen.sensepost.com>
Content-Description:
Content-Disposition: attachment; filename="finder.pl"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--0-1454085597-1047940148=:37540--
