Run Nmap scripts to enumerate the Windows target machine IIS service.
nmap -p80 -sV --script http-enum 10.10.10.50
#get IIS info and potentially interesting folders;
nmap -p80 -sV --script http-headers 10.10.10.50
#HEAD request on root folder (“/”);
nmap -p80 -sV --script http-methods --script-args http-methods.url-path=/webdav/ 10.10.10.50
#check methods on folder;
nmap -p80 -sV --script http-webdav-scan --script-args http-methods.url-path=/webdav/ 10.10.10.50
#run webdav scan on folder;