Skip to content

Apple app site association for harvesting end points

ID: apple-app-site-association

Severity: info

Author: panch0r3d

Tags: miscellaneous,misc,apple

id: apple-app-site-association
info:
name: Apple app site association for harvesting end points
author: panch0r3d
severity: info
metadata:
max-request: 3
tags: miscellaneous,misc,apple
http:
- method: GET
path:
- "{{BaseURL}}/.well-known/apple-app-site-association"
- "{{BaseURL}}/well-known/apple-app-site-association"
- "{{BaseURL}}/apple-app-site-association"
stop-at-first-match: true
matchers-condition: and
matchers:
- type: word
part: body
words:
- 'applinks'
- 'appID'
- 'paths'
condition: and
- type: word
part: header
words:
- 'application/json'
- type: status
status:
- 200
extractors:
- type: json
json:
- .applinks.details[].appID
# digest: 4a0a004730450220459630104687543dc2d52d6a5c2d0b1fe6b075101cc6e4412ce87614c1643c92022100949d42c7bee5900cac6f6e6d331656978ebcf2daecb6c6e4cbf8d7c57e8703dc:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/miscellaneous/apple-app-site-association.yaml"

View on Github