ArcGIS Exposed REST API documentation
ID: arcgis-rest-api
Severity: info
Author: Podalirius
Tags: api,arcgis,cms,tech,esri
Description
Section titled “Description”ArcGIS REST API documentation was discovered.
YAML Source
Section titled “YAML Source”id: arcgis-rest-api
info: name: ArcGIS Exposed REST API documentation author: Podalirius severity: info description: ArcGIS REST API documentation was discovered. reference: - https://enterprise.arcgis.com/en/ classification: cwe-id: CWE-200 cpe: cpe:2.3:a:esri:arcgis_engine:*:*:*:*:*:*:*:* metadata: max-request: 1 vendor: esri product: arcgis_engine tags: api,arcgis,cms,tech,esri
http: - method: GET path: - '{{BaseURL}}/server/sdk/rest/index.html'
matchers-condition: and matchers: - type: word words: - 'ArcGIS REST API'
- type: status status: - 200# digest: 4a0a00473045022100df4c92b7086cdb617926153895e0c31868cf37d82201dc162d3aa14ebdd49a6f02204bf26acc2ce4dd37888980eca652f676e86aab6d35c3b8241364e37350f5785c:922c64590222798bb761d5b6d8e72950Guide to check the vulnerabilities
Section titled “Guide to check the vulnerabilities”This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.
$ nuclei -u "URL" -t "http/technologies/arcgis-rest-api.yaml"