Kestrel
tcp/443
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1aad035498a2b9070cd00fa3935cb1e8c6c8e4b793b4561d3
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/Account/oidc-login
GET /api/Comments/field-response/{id}
GET /api/Fields
GET /api/Fields/projectType/{id}
GET /api/Fields/section/{id}
GET /api/Fields/{projectId}/{sectionType}/{name}
GET /api/LiteratureReviews
GET /api/LiteratureReviews/{id}
GET /api/LiteratureReviews/{id}/form/{sectionId}
GET /api/LiteratureReviews/{id}/summary
GET /api/Notes
GET /api/Notes/{id}
GET /api/Notes/{id}/feedback
GET /api/Notes/{id}/field-response/{fieldId}
GET /api/Notes/{id}/form/{sectionId}
GET /api/Plans
GET /api/Plans/{id}
GET /api/Plans/{id}/form/{sectionId}
GET /api/Plans/{id}/summary
GET /api/Projects
GET /api/Projects/{id}
GET /api/Projects/{id}/instructors
GET /api/Projects/{id}/summary
GET /api/ReactionTable/compounds
GET /api/ReactionTable/data
GET /api/ReactionTable/reagent
GET /api/ReactionTable/solvent
GET /api/ReactionTable/solvents
GET /api/RegistrationRules
GET /api/RegistrationRules/{id}
GET /api/Reports
GET /api/Reports/{id}
GET /api/Reports/{id}/GenerateExport
GET /api/Reports/{id}/form/{sectionId}
GET /api/Reports/{id}/summary
GET /api/Roles
GET /api/Roles/{roleId}
GET /api/Sections/File
GET /api/Sections/project-type/{id}
GET /api/Sections/project/{id}
GET /api/Sections/section-type/{sectionType}/project/{id}
GET /api/Users
GET /api/Users/me
GET /api/Users/{id}
GET /api/input-types
GET /api/input-types/{id}
GET /api/project-groups/project/{id}
GET /api/project-groups/{id}
GET /api/project-groups/{id}/form
GET /api/project-types
GET /api/project-types/section-types
GET /api/project-types/{id}
POST /api/Account/confirm
POST /api/Account/confirm/resend
POST /api/Account/email/confirm-change
POST /api/Account/login
POST /api/Account/logout
POST /api/Account/password/request-reset
POST /api/Account/password/reset
POST /api/Account/register
POST /api/Comments
POST /api/Fields/{id}/save
POST /api/LiteratureReviews/{id}/advance
POST /api/Notes/lock-notes/{id}
POST /api/Notes/{id}/advance
POST /api/Notes/{id}/complete-feedback
POST /api/Notes/{id}/request-feedback
POST /api/Plans/{id}/advance
POST /api/Prediction/forward
POST /api/Projects/{id}/invite-instructors
POST /api/Projects/{id}/remove-instructor
POST /api/Projects/{id}/validate-instructor
POST /api/RegistrationRules/validate
POST /api/Reports/{id}/advance
POST /api/Sections/save
POST /api/Users/invite
POST /api/project-groups
POST /api/project-groups/{id}/invite-students
POST /api/project-groups/{id}/remove-student
POST /api/project-types/{id}/advance
PUT /api/Account/activate
PUT /api/Comments/{id}
PUT /api/Comments/{id}/read
PUT /api/LiteratureReviews/save-form
PUT /api/Notes/save-form
PUT /api/Plans/save-form
PUT /api/Reports/save-form
PUT /api/Users/invite/resend
PUT /api/Users/ui-culture
PUT /api/Users/{id}/email/request-change
PUT /api/Users/{id}/roles/update
PUT /api/project-groups/save-form
Open service 20.50.2.68:443 ยท ai4g4s.app
2026-01-23 07:22
HTTP/1.1 200 OK
Content-Length: 471
Connection: close
Content-Type: text/html
Date: Fri, 23 Jan 2026 07:23:01 GMT
Server: Kestrel
Accept-Ranges: bytes
ETag: "1dc62cad0c8aad7"
Last-Modified: Mon, 01 Dec 2025 14:00:14 GMT
Set-Cookie: .AI4Green4Students.Config=%7B%22Flags%22%3A%7B%7D%7D; path=/
Set-Cookie: ARRAffinity=99e54dcb6511402fae8a9cf72df588c1efb0456cc12db12ac6f8e073659b7f37;Path=/;HttpOnly;Secure;Domain=ai4g4s.app
Set-Cookie: ARRAffinitySameSite=99e54dcb6511402fae8a9cf72df588c1efb0456cc12db12ac6f8e073659b7f37;Path=/;HttpOnly;SameSite=None;Secure;Domain=ai4g4s.app
Request-Context: appId=cid-v1:63feee2b-4d46-4951-a3d3-f33fa7ee2f6f
X-Clacks-Overhead: GNU Terry Pratchett
Page title: AI4Green4Students
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<link rel="icon" type="image/svg+xml" href="/src/favicon.svg" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<title>AI4Green4Students</title>
<script type="module" crossorigin src="/assets/index-Dtgq7pLB.js"></script>
<link rel="stylesheet" crossorigin href="/assets/index-D_b0iR-4.css">
</head>
<body>
<div id="root"></div>
</body>
</html>