Skip to content

ArcGIS Exposed REST API documentation

ID: arcgis-rest-api

Severity: info

Author: Podalirius

Tags: api,arcgis,cms,tech,esri

ArcGIS REST API documentation was discovered.

id: arcgis-rest-api
info:
name: ArcGIS Exposed REST API documentation
author: Podalirius
severity: info
description: ArcGIS REST API documentation was discovered.
reference:
- https://enterprise.arcgis.com/en/
classification:
cwe-id: CWE-200
cpe: cpe:2.3:a:esri:arcgis_engine:*:*:*:*:*:*:*:*
metadata:
max-request: 1
vendor: esri
product: arcgis_engine
tags: api,arcgis,cms,tech,esri
http:
- method: GET
path:
- '{{BaseURL}}/server/sdk/rest/index.html'
matchers-condition: and
matchers:
- type: word
words:
- 'ArcGIS REST API'
- type: status
status:
- 200
# digest: 4a0a00473045022100df4c92b7086cdb617926153895e0c31868cf37d82201dc162d3aa14ebdd49a6f02204bf26acc2ce4dd37888980eca652f676e86aab6d35c3b8241364e37350f5785c:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/technologies/arcgis-rest-api.yaml"

View on Github