Skip to content

Information Disclosure: Application Information Disclosure

Identifier: application_enumeration

Scanner(s) Support

GraphQL Scanner REST Scanner WebApp Scanner ASM Scanner

Description

Application information disclosure findings describe general application details that may aid reconnaissance, such as exposed structure, behavior, routes, authorization boundaries, or technology hints.

How we test: We analyze application responses and discovered resources for general enumeration signals that reveal how the application is organized or behaves, without treating the finding as sensitive data exposure.

Configuration

Example

Example configuration:

---
security_tests:
  application_enumeration:
    skip: false

Reference

skip

Type : boolean

Skip the test if true.