id: arcgis-panel

info:
  name: ArcGIS Enterprise Panel
  author: Podalirius
  severity: info
  description: An ArcGIS instance was discovered.
  reference:
    - https://enterprise.arcgis.com/en/
  classification:
    cwe-id: CWE-200
    cpe: cpe:2.3:a:esri:arcgis_enterprise:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
    product: arcgis_enterprise
    vendor: esri
  tags: docs,arcgis,cms,panel,esri

http:
  - method: GET
    path:
      - '{{BaseURL}}/portal/portalhelp/en/'

    matchers-condition: and
    matchers:
      - type: word
        words:
          - 'ArcGIS Enterprise'
          - 'Installation and Deployment'
        condition: or

      - type: status
        status:
          - 200

    extractors:
      - type: regex
        part: body
        group: 1
        regex:
          - '&nbsp;([0-9.]+)</span>'

      - type: regex
        part: body
        group: 2
        regex:
          - '(Released Version:</strong>[\n\t ]+(([0-9]+(.[0-9]+)?(.[0-9]+)?)([\n\t
            ]+\([A-Za-z]+[\t ]+20[0-9][0-9]\))?))'
# digest: 4a0a004730450220281ad388414a5d110cfd5a7c7e9785b4aadcb95d806f94ecc6259d78b8b79a04022100b1a6fb2363b60f1e9b677cf1f4cf12abd8088cd5b53a6659d95408c585b82bac:922c64590222798bb761d5b6d8e72950