Just a quick check for what methods allowed in http directory when hunting for webdav

whatmeth.sh

#!/bin/bash

function help() {
  echo "Usage: $0 [target-url|target-url-file]"
  echo "Example: $0 http://example.com/test/"
  echo "         $0 enumeration/gobuster/port_80_initial.txt"
}

[ ! -f /usr/share/seclists/Discovery/Web-Content/web-extensions.txt ] && echo "Error: We need https://github.com/danielmiessler/SecLists/blob/master/Discovery/Web-Content/web-extensions.txt" && exit 0
[ -z "$1" ] || [ ! -f "$1" ] && help && exit 0

[ -f "$1" ] && targets=$(cat $1 | sort -u)
exts=$(cat /usr/share/seclists/Discovery/Web-Content/web-extensions.txt)

for target in $(echo "$targets" | awk '{print $1}'); do
  target=${target%/}
  ext=$(awk -F'/' '{print $NF}' <<< $target | awk -F'.' '{print $NF}')

  [ -n "$(grep -w $ext <<< $exts)" ] && continue
  methods=$(curl -sIXOPTIONS $target/ | grep 'Allow: ' | awk '{print $NF}')
  methods=${methods:-"None"}
  echo "$target | $methods"
done