Domain api.bithabit.me
The Netherlands
Software information
Kestrel
tcp/443
-
Swagger API description is publicly available
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
First seen 2026-01-11 17:10
Last seen 2026-01-16 14:41
Open for 4 days-
Severity: info
Fingerprint: 5733ddf49ff49cd1aad035492f92d38db93495e9d1e2baa4fbb9e7168621b3bbPublic Swagger UI/API detected at path: /swagger/index.html - sample paths: GET /AppAuth/seed GET /AppAuth/seed2 GET /AppAuth/seed3 GET /AppAuth/seed4 GET /AppAuth/sendverification GET /AppAuth/verifynumber GET /api/AppLanguage GET /api/AppLanguage/languagelist GET /api/AppLanguage/languages GET /api/AppLanguage/staticfields GET /api/AppLanguage/studylanguages GET /api/AppLanguage/translations GET /api/Browse GET /api/Browse/detail GET /api/BulkUserImport GET /api/DataExport/exportevent GET /api/DataExport/exportquestion GET /api/DataExport/exportsess GET /api/DataExport/exportusers GET /api/DataExport/exportusraction GET /api/DataExport/exportusrhabit GET /api/Feedback GET /api/Goal GET /api/Goal/list GET /api/Habit GET /api/Habit/habitcat GET /api/Habit/list GET /api/Habit/selectlist GET /api/HabitContext GET /api/HabitContext/list GET /api/HabitGroup GET /api/HabitGroup/list GET /api/Monitor GET /api/Monitor/context GET /api/Monitor/gethabitschedule GET /api/Monitor/habitnotes GET /api/Monitor/performances GET /api/Monitor/totalselected GET /api/Notification GET /api/Notification/reminder GET /api/PushNotification/send GET /api/PushNotification/vapidpublickey GET /api/Question GET /api/Question/list GET /api/QuestionOption GET /api/QuestionOption/list GET /api/Questionnaire GET /api/Questionnaire/list GET /api/Recommendation GET /api/Score GET /api/Score/leaderboard GET /api/SocialFeed GET /api/SocialFeedComment GET /api/Study GET /api/Study/studylist GET /api/Summary GET /api/SuperGroup GET /api/SuperGroup/list GET /api/Tag GET /api/Tag/list GET /api/User/adminstudies GET /api/User/pendingtasks GET /api/User/userlist GET /api/UserGoal GET /api/UserProfile GET /api/UserProfile/profile GET /api/UserQuestionnaire POST /AppAuth/loginapi POST /AppAuth/sendactivation POST /AppAuth/sendactivationtoall POST /api/Log POST /api/Log/trackevent POST /api/Notification/dr POST /api/PushNotification/subscribe POST /api/SuggestHabit POST /api/User/updatelang POST /api/User/updateuserstudy PUT /AppAuth/register PUT /api/Monitor/associatecontext PUT /api/Monitor/discontinue PUT /api/Monitor/movehabit PUT /api/Monitor/pending PUT /api/Monitor/savenotes PUT /api/Monitor/saveschedule PUT /api/User PUT /api/UserQuestionnaire/skip
Found on 2026-01-16 14:41
-
-
Open service 20.105.224.34:443 · api.bithabit.me
2026-01-11 17:10
HTTP/1.1 404 Not Found Content-Length: 0 Connection: close Date: Sun, 11 Jan 2026 17:11:41 GMT Server: Kestrel Request-Context: appId=cid-v1:afb5b939-0202-4737-bfd9-1d047c838ff5
Found 2026-01-11 by HttpPluginCreate report
-
Open service 20.105.224.34:80 · api.bithabit.me
2026-01-11 17:10
HTTP/1.1 301 Moved Permanently Content-Length: 0 Connection: close Date: Sun, 11 Jan 2026 17:11:40 GMT Location: https://api.bithabit.me/
Found 2026-01-11 by HttpPluginCreate report