Domain easy.cbt.aero
Ireland
Software information
Kestrel
tcp/443
-
Swagger API description is publicly available
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
First seen 2025-12-06 09:27
Last seen 2026-02-09 17:19
Open for 65 days-
Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549c0fbce27d5f1f26b3541d11959ad9139b7ae526aPublic Swagger UI/API detected at path: /swagger/index.html - sample paths: POST /api/administrator/create-company POST /api/administrator/create-course POST /api/auth/login POST /api/auth/reset-password POST /api/auth/send-reset-password-email POST /api/enrollments/add-new POST /api/enrollments/pay POST /api/users/create-administrator POST /api/users/create-manager POST /api/users/create-student
Found on 2026-02-09 17:19
-
-
Open service 20.50.64.9:443 ยท easy.cbt.aero
2026-01-23 14:21
HTTP/1.1 200 OK Content-Length: 2438 Connection: close Content-Type: text/html Date: Fri, 23 Jan 2026 14:22:20 GMT Server: Kestrel Accept-Ranges: bytes ETag: "1d81817519d3986" Last-Modified: Wed, 02 Feb 2022 09:29:04 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:9cff402f-2c91-4174-bd90-76ecacc413cd Content-Security-Policy: frame-ancestors 'none';frame-src * Page title: Aviation eLearning Enrolments <!doctype html><html lang="en" dir="ltr"><head><meta charset="utf-8"/><link rel="shortcut icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"/><meta name="theme-color" content="#000000"/><link rel="manifest" href="/manifest.json"/><title>Aviation eLearning Enrolments</title><meta name="description" content="Enrol users to courses easily."/><meta name="keywords" content="aviatio, elearning, lms, enrolment"/><meta name="author" content="Aviation eLearning"/><noscript id="jss-insertion-point"></noscript><link href="https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600&display=swap" rel="stylesheet"/></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div><script>!function(e){function r(r){for(var n,a,l=r[0],p=r[1],i=r[2],c=0,s=[];c<l.length;c++)a=l[c],Object.prototype.hasOwnProperty.call(o,a)&&o[a]&&s.push(o[a][0]),o[a]=0;for(n in p)Object.prototype.hasOwnProperty.call(p,n)&&(e[n]=p[n]);for(f&&f(r);s.length;)s.shift()();return u.push.apply(u,i||[]),t()}function t(){for(var e,r=0;r<u.length;r++){for(var t=u[r],n=!0,l=1;l<t.length;l++){var p=t[l];0!==o[p]&&(n=!1)}n&&(u.splice(r--,1),e=a(a.s=t[0]))}return e}var n={},o={1:0},u=[];function a(r){if(n[r])return n[r].exports;var t=n[r]={i:r,l:!1,exports:{}};return e[r].call(t.exports,t,t.exports,a),t.l=!0,t.exports}a.m=e,a.c=n,a.d=function(e,r,t){a.o(e,r)||Object.defineProperty(e,r,{enumerable:!0,get:t})},a.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},a.t=function(e,r){if(1&r&&(e=a(e)),8&r)return e;if(4&r&&"object"==typeof e&&e&&e.__esModule)return e;var t=Object.create(null);if(a.r(t),Object.defineProperty(t,"default",{enumerable:!0,value:e}),2&r&&"string"!=typeof e)for(var n in e)a.d(t,n,function(r){return e[r]}.bind(null,n));return t},a.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return a.d(r,"a",r),r},a.o=function(e,r){return Object.prototype.hasOwnProperty.call(e,r)},a.p="/";var l=this["webpackJsonpmaterial-app"]=this["webpackJsonpmaterial-app"]||[],p=l.push.bind(l);l.push=r,l=l.slice();for(var i=0;i<l.length;i++)r(l[i]);var f=p;t()}([])</script><script src="/static/js/2.f844d3fc.chunk.js"></script><script src="/static/js/main.42bd1ce4.chunk.js"></script></body></html>Found 2026-01-23 by HttpPluginCreate report