# Enumeration

> Covers REST API enum of auth, version, cluster, indices, mappings

- **URL:** https://hackindex.io/services/elasticsearch/enumeration
- **Service:** [Elasticsearch](https://hackindex.io/services/elasticsearch.md)
- **Tags:** services, users, endpoints
- **Published:** 2026-01-18
- **Updated:** 2026-03-29

Elasticsearch enumeration is about mapping the cluster before you touch any data. Version info, node topology, index names, and field mappings tell you what is stored and how the cluster is configured.

The REST API exposes most of this without authentication when security is disabled. Cluster health, node stats, index listings, and mapping endpoints reveal the attack surface in a few HTTP requests.

Start here to identify high-value indices, check for default credentials, and understand the cluster layout before moving into exploitation or data extraction.

## Guides

- [Elasticsearch enumeration via REST API](https://hackindex.io/services/elasticsearch/enumeration/elasticsearch-enumeration-via-rest-api.md)