Node enumeration script finds the availability of content within a Drupal site for audit purposes. May help uncover pages mistakenly available to anonymous users.

scan_drupal_nodes.php

<?php

$url_prefix = 'https://deekayen.net/node/';
$low = 1400;
$high = 1450;
$output_file = '/Users/davidnorman/Sites/scan/scan.csv';

/******************************************/

$fp = fopen($output_file, 'w');
fputcsv($fp, array('URL', 'Status Code'));

for ($i = $low; $i <= $high; $i++) {
  $ch = curl_init($url_prefix . $i);

  curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);

  curl_exec($ch);

  $info = curl_getinfo($ch);

  if ($info['http_code'] != '404') {
    fputcsv($fp, array($info['url'], $info['http_code']));
  }

  curl_close($ch);
}

fclose($fp);