Home page logo
/
Zenmap screenshot
Intro Reference Guide Book Install Guide
Download Changelog Zenmap GUI Docs
Bug Reports OS Detection Propaganda Related Projects
In the Movies In the News
Example Nmap output

File http-drupal-enum

Script types: portrule
Categories: discovery, intrusive
Download: http://nmap.org/svn/scripts/http-drupal-enum.nse

User Summary

Enumerates the installed Drupal modules/themes by using a list of known modules and themes.

The script works by iterating over module/theme names and requesting MODULE_PATH/MODULE_NAME/LICENSE.txt for modules and THEME_PATH/THEME_NAME/LICENSE.txt. MODULE_PATH/THEME_PATH which is either provided by the user, grepped for in the html body or defaulting to sites/all/modules/.

If the response status code is 200, it means that the module/theme is installed. By default, the script checks for the top 100 modules/themes (by downloads), given the huge number of existing modules (~18k) and themes(~1.4k).

If you want to update your themes or module list refer to the link below.

Script Arguments

http-drupal-enum.themes_path

Direct Path for Themes

http-drupal-enum.number

Number of modules to check. Use this option with a number or "all" as an argument to test for all modules. Defaults to 100.

http-drupal-enum.type

default all.choose between "themes" and "modules"

http-drupal-enum.root

The base path. Defaults to /.

http-drupal-enum.modules_path

Direct Path for Modules

slaxml.debug

See the documentation for the slaxml library.

http.max-cache-size, http.max-pipeline, http.pipeline, http.useragent

See the documentation for the http library.

smbdomain, smbhash, smbnoguest, smbpassword, smbtype, smbusername

See the documentation for the smbauth library.

Example Usage

nmap -p 80 --script http-drupal-enum <target>

Script Output

PORT   STATE SERVICE REASON
80/tcp open  http    syn-ack
| http-drupal-enum:
|   Themes:
|     adaptivetheme
|   Modules:
|     views
|     token
|     ctools
|     pathauto
|     date
|     imce
|_    webform

Final times for host: srtt: 329644 rttvar: 185712  to: 1072492

Requires


License: Same as Nmap--See https://nmap.org/book/man-legal.html

Nmap Site Navigation

Intro Reference Guide Book Install Guide
Download Changelog Zenmap GUI Docs
Bug Reports OS Detection Propaganda Related Projects
In the Movies In the News
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]