Kestrel
tcp/443
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
Public Swagger UI/API detected at path: /swagger/index.html
Open service 20.105.232.52:443 ยท code-breaker.nl
2026-01-23 09:25
HTTP/1.1 200 OK
Connection: close
Content-Type: text/html; charset=utf-8
Date: Fri, 23 Jan 2026 09:26:20 GMT
Server: Kestrel
Cache-Control: no-cache, no-store, max-age=0
Set-Cookie: DeviceIdentifier=2886581B-9DAC-4DA6-83AD-AD1DB43FC5C4; path=/
Set-Cookie: .AspNetCore.Culture=c%3Dnl-NL%7Cuic%3Dnl-NL; path=/
Transfer-Encoding: chunked
Page title: Home
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<base href="/" />
<link href="https://fonts.googleapis.com/css?family=Roboto+Mono:300,400,500,700&display=swap" rel="stylesheet" />
<link href="_content/MudBlazor/MudBlazor.min.css" rel="stylesheet" />
<link href="CodeBreaker.App.styles.css" rel="stylesheet" />
<link href="css/site.css" rel="stylesheet" />
<link href="css/theme.css" rel="stylesheet" />
<link rel="icon" type="image/png" href="favicon.png" />
<!--Blazor:{"type":"server","prerenderId":"7e26938864024ca5836e004adff20e71","key":{"locationHash":"77D12F14A8105320B1AAED6AE7E689DA0EC4483270A645E84079EAA0FFDF550D:0","formattedComponentKey":""},"sequence":0,"descriptor":"CfDJ8L0lib84VqZPuDn3MUkWQ0a\u002BUDEUNFz1YHKiH/x2JoMlu4rfaemPn0y4D5Va\u002B0Ctb\u002BM4WhUE0eBqwIAd04J0tmPVbb3cYAcxHHmsCE3MeE2eUW5QiqFFbRgkrLbg6mCgfJ5V73BBzJUbv69LSBGkYzhreS\u002BMZb2MiqyUcgsIjjQ/64sn4xAL7E92sC2IIyhnLRo8M5UxxNNkxW1rOTrfUIXpcOwdp1MJOlMs70OgLO4GVzoH24MGJovnCx\u002BqF94zH5WKK89v/Pcm8Lg3erk8g9x4C8GGRX5TvDPdkc4RxWXZ5CsllHRurDFHEWfOXLhmqzyQ\u002BUOf97Vfx3sWqXvQ3fHbw2a5IEXTo8ZqTjm54Ft\u002BbxEKSkeTHtTPXTgTWUuHdb3OR08ADOaAgTqjZRWMyqbRCXa21Ty00LnMCEWEXI/VVd/8LtsPkYltPaGWFfuBo2GUHqEsv50/y5MGXUAifd6\u002BQruMDggAiArpcIM4ZO7oCgrJtmFYEOVMMNhC0Aj0KfsQTMpAWl2ee9MkQDAheb3p9XU9gkm9cmdST7xw9u4tPWhAHqHXnXHZcOpwf10WQMWNP5SSbvyr72fgLArsOGI="}--><title>Home</title><!--Blazor:{"prerenderId":"7e26938864024ca5836e004adff20e71"}-->
</head>
<body>
<!--Blazor:{"type":"server","prerenderId":"929dddcb4e804e12980b551e2b64a308","key":{"locationHash":"4C2EED7710D4488D68A66700BB9093CBDCBEF7629E40AD5133F63B6B9E548C55:0","formattedComponentKey":""},"sequence":1,"descriptor":"CfDJ8L0lib84VqZPuDn3MUkWQ0aQOzMInRBnWzcKoEnzf/GdDI/wshUCl/iYFvOK2DPIE1EmHuprSZX62WlNF2cFC6TezROI9NAaY5JKTLyUW11jW1KOFsnU7rwbORKjHT6t8Imk6WI3wjRjlKR1idy6Pxz/akk1VqcHPc1gAF6FwEkL7POj89uC5m4vXxE6ULkcselaNCaRd6ul66D1xQw2k8T0qy4vOcG2ktHCC/x5gGfYW3wbiDZnyg4zT4tBcH3oW9vjuNMB/YXUJ5oJD0u7V7lsH2OGAnlrqItEUWGX\u002BY7H230GB3TflXNi8TGSIpOdlQKRR6iypeDHte/ZD9Ib0EtSmSZ5CP7CTmNuFAzZdShNxjjoYVeVYiXBaJoYd\u002Bv2uregkgZVkvdSLD4k0Yxf3XLfpa4JZToqPU\u002BkvaTlcUoVG2\u002BxHY9oB6RqUF19VCGGZqVI5xENq3FXJIEDG2DG1cBRypJyaUPOTPZuSTaWRyvMF6ekqDFdMhyRlAB7DuO5ILVtQr0Q2T455ScxMhfG5vc="}--><style>
::-webkit-scrollbar {width: 8px;height: 8px;z-index: 1;}
::-webkit-scrollbar-track {background: transparent;}
::-webkit-scrollbar-thumb {background: #c4c4c4;border-radius: 1px;}
::-webkit-scrollbar-thumb:hover {background: #a6a6a6;}
html, body * {scrollbar-color: #c4c4c4 transparent;scrollbar-width: thin;}
</style>
<style>
.mud-chart-serie:hover {
filter: url(#lighten);
}
.mud-chart-serie-hovered
{
filter: url(#lighten);
}
</style>
<style class='mud-theme-provider'>
:root{
--mud-palette-black: rgba(39,39,47,1);
--mud-palette-white: rgba(255,255,255,1);
--mud-palette-primary: rgba(119,107,231,1);
--mud-palette-primary-rgb: 119,107,231;
--mud-palette-primary-text: rgba(255,255,255,1);
--mud-palette-primary-darken: rgb(90,75,226);
--mud-palette-primary-lighten: rgb(151,141,236);
--mud-palette-primary-hover: rgba(119,107,231,0.058823529411764705);
--mud-palette-secondary: rgba(255,64,129,1);
--mud-palette-secondary-rgb: 255,64,129;
--mud-palette-secondary-text: rgba(255,255,255,1);
--mud-palette-secondary-darken: rgb(255,31,105);
--mud-palette-secondary-lighten: rgb(255,102,153);
--mud-palette-secondary-hover: rgba(255,64,129,0.058823529411764705);
--mud-palette-tertiary: rgba(30,200,165,1);
--mud-palette-tertiary-rgb: 30,200,165;
--mud-palette-tertiary-text: rgba(255,255,255,1);
--mud-palette-tertiary-darken: rgb(25,169,140);
--mud-palette-tertiary-lighten: rgb(42,223,187);
--mud-palette-tertiary-hover: rgba(30,200,165,0.058823529411764705);
--mud-palette-info: rgba(50,153,255,1);
--mud-palette-info-rgb: 50,153,255;
--mud-palette-info-text: rgba(255,255,255,1);
--mud-palette-info-darken: rgb(10,133,255);
--mud-palette-info-lighten: rgb(92,173,255);
--mud-palette-info-