LeakIX - Host hnnytestapi.liangceai.net

Domain hnnytestapi.liangceai.net

China

China Telecom Group

Software information

Tengine

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 180.163.146.111
Domain: hnnytestapi.liangceai.net
Port: 443
URL: https://hnnytestapi.liangceai.net

First seen 2025-12-21 13:25
Last seen 2026-01-23 07:05
Open for 32 days

Severity: info
Fingerprint: 5733ddf49ff49cd1926e27d0926e27d0926e27d0926e27d0926e27d0926e27d0
```
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html
```
Found on 2026-01-23 07:05

Severity: info
Fingerprint: 5733ddf49ff49cd1a8bcc6e521d88ddc322d6636d69bab412d5f18badece364a

Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html - sample paths:
DELETE /admin-api/infra/codegen/delete
DELETE /admin-api/infra/config/delete
DELETE /admin-api/infra/data-source-config/delete
DELETE /admin-api/infra/file-config/delete
DELETE /admin-api/infra/job/delete
DELETE /admin-api/infra/redis/delete-key
DELETE /admin-api/infra/redis/delete-keys
DELETE /admin-api/infra/test-demo/delete
DELETE /admin-api/system/couponTemplate/deleteSystemCouponTemplate
DELETE /admin-api/system/dept/delete
DELETE /admin-api/system/dict-type/delete
DELETE /admin-api/system/dict/delete
DELETE /admin-api/system/error-code/delete
DELETE /admin-api/system/manager/delete
DELETE /admin-api/system/menu/delete
DELETE /admin-api/system/notice/delete
DELETE /admin-api/system/oauth2-token/delete
DELETE /admin-api/system/post/delete
DELETE /admin-api/system/profit-package/delete
DELETE /admin-api/system/prompt-category/delete
DELETE /admin-api/system/prompt/delete
DELETE /admin-api/system/recharge-package/delete
DELETE /admin-api/system/role/delete
DELETE /admin-api/system/sensitive-word/delete
DELETE /admin-api/system/sms-channel/delete
DELETE /admin-api/system/sms-template/delete
DELETE /admin-api/system/social-user/unbind
DELETE /admin-api/system/systemCoupon/deleteSystemCoupon
DELETE /admin-api/system/systemCoupon/loseSystemCoupon
DELETE /admin-api/system/tenant/cert/delete
DELETE /admin-api/system/tenant/delete
DELETE /admin-api/system/tenant/project/delete
DELETE /admin-api/system/user/delete
DELETE /app-api/infra/file/deleteFile
DELETE /app-api/member/address/delete
DELETE /app-api/member/user-favorite/delete
DELETE /app-api/member/user/delete-user
DELETE /app-api/system/social-user/unbind
GET /admin-api/admin/chat/exportLikeExcel
GET /admin-api/infra/api-access-log/export-excel
GET /admin-api/infra/api-access-log/page
GET /admin-api/infra/api-error-log/export-excel
GET /admin-api/infra/api-error-log/page
GET /admin-api/infra/codegen/db/table/list
GET /admin-api/infra/codegen/detail
GET /admin-api/infra/codegen/download
GET /admin-api/infra/codegen/preview
GET /admin-api/infra/codegen/table/page
GET /admin-api/infra/config/export
GET /admin-api/infra/config/get
GET /admin-api/infra/config/get-value-by-key
GET /admin-api/infra/config/page
GET /admin-api/infra/data-source-config/get
GET /admin-api/infra/data-source-config/list
GET /admin-api/infra/db-doc/export-html
GET /admin-api/infra/db-doc/export-markdown
GET /admin-api/infra/db-doc/export-word
GET /admin-api/infra/file-config/get
GET /admin-api/infra/file-config/page
GET /admin-api/infra/file-config/test
GET /admin-api/infra/file/oss/token
GET /admin-api/infra/job-log/export-excel
GET /admin-api/infra/job-log/get
GET /admin-api/infra/job-log/list
GET /admin-api/infra/job-log/page
GET /admin-api/infra/job/export-excel
GET /admin-api/infra/job/get
GET /admin-api/infra/job/get_next_times
GET /admin-api/infra/job/list
GET /admin-api/infra/job/page
GET /admin-api/infra/redis/get-key-define-list
GET /admin-api/infra/redis/get-key-list
GET /admin-api/infra/redis/get-key-value
GET /admin-api/infra/redis/get-monitor-info
GET /admin-api/infra/test-demo/export-excel
GET /admin-api/infra/test-demo/get
GET /admin-api/infra/test-demo/list
GET /admin-api/infra/test-demo/page
GET /admin-api/member/user/get-by-mobile
GET /admin-api/product/**
GET /admin-api/promotion/**
GET /admin-api/report/**
GET /admin-api/system/aiAccount/get-import-template
GET /admin-api/system/aiAccount/page
GET /admin-api/system/auth/get-permission-info
GET /admin-api/system/couponTemplate/getSystemCouponTemplate
GET /admin-api/system/couponTemplate/getSystemCouponTemplateList
GET /admin-api/system/couponTemplate/getTemplateListByType
GET /admin-api/system/dept/get
GET /admin-api/system/dept/list
GET /admin-api/system/dept/list-all-simple
GET /admin-api/system/dept/tree
GET /admin-api/system/dict-data/ea-not-pass-reason
GET /admin-api/system/dict-data/enterprise-scale
GET /admin-api/system/dict-data/indicator-type
GET /admin-api/system/dict-data/industry-category
GET /admin-api/system/dict-data/project-item
GET /admin-api/system/dict-data/qualification-type
GET /admin-api/system/dict-type/export
GET /admin-api/system/dict-type/get
GET /admin-api/system/dict-type/list-all-simple
GET /admin-api/system/dict-type/page
GET /admin-api/system/dict/get
GET /admin-api/system/dict/list-all-simple
GET /admin-api/system/dict/page
GET /admin-api/system/error-code/export-excel
GET /admin-api/system/error-code/get
GET /admin-api/system/error-code/page
GET /admin-api/system/login-log/export
GET /admin-api/system/login-log/page
GET /admin-api/system/manager/get
GET /admin-api/system/master-data-test/solar-gis-test
GET /admin-api/system/master-data-test/value-query-test
GET /admin-api/system/menu/get
GET /admin-api/system/menu/list
GET /admin-api/system/notice/get
GET /admin-api/system/notice/page
GET /admin-api/system/oauth2-token/page
GET /admin-api/system/operate-log/export
GET /admin-api/system/operate-log/page
GET /admin-api/system/permission/list-role-resources
GET /admin-api/system/permission/list-user-roles
GET /admin-api/system/post/export
GET /admin-api/system/post/get
GET /admin-api/system/post/list-all-simple
GET /admin-api/system/post/page
GET /admin-api/system/profit-package/get
GET /admin-api/system/profit-package/page
GET /admin-api/system/prompt-category/get
GET /admin-api/system/prompt/get
GET /admin-api/system/recharge-package/get
GET /admin-api/system/recharge-package/page
GET /admin-api/system/role/get
GET /admin-api/system/role/list-all-simple
GET /admin-api/system/role/page
GET /admin-api/system/sensitive-word/export-excel
GET /admin-api/system/sensitive-word/get
GET /admin-api/system/sensitive-word/get-tags
GET /admin-api/system/sensitive-word/page
GET /admin-api/system/sensitive-word/validate-text
GET /admin-api/system/sms-channel/get
GET /admin-api/system/sms-channel/list-all-simple
GET /admin-api/system/sms-channel/page
GET /admin-api/system/sms-log/export-excel
GET /admin-api/system/sms-log/page
GET /admin-api/system/sms-template/export-excel
GET /admin-api/system/sms-template/get
GET /admin-api/system/sms-template/page
GET /admin-api/system/systemCoupon/getAppTemplateByType
GET /admin-api/system/systemCoupon/getByMobile
GET /admin-api/system/systemCoupon/getProfitUserById
GET /admin-api/system/systemCoupon/getSystemCoupon
GET /admin-api/system/tenant/cert/get-by-id
GET /admin-api/system/tenant/get
GET /admin-api/system/tenant/get-id-by-name
GET /admin-api/system/tenant/get-invite-code
GET /admin-api/system/tenant/page
GET /admin-api/system/tenant/project/get
GET /admin-api/system/user/create-pre-check
GET /admin-api/system/user/get-by-deptid
GET /admin-api/system/user/get-role
GET /admin-api/system/user/list
GET /admin-api/system/user/list-all-simple
GET /admin-api/system/user/page
GET /admin-api/system/withdraw/get
GET /admin-api/trade/**
GET /app-api/app/systemCoupon/giveMemberCoupon
GET /app-api/chat/group/create
GET /app-api/chat/group/delete
GET /app-api/chat/group/list-within-thirty-days
GET /app-api/chat/group/message/get-message
GET /app-api/chat/group/message/query-history-messages
GET /app-api/chat/group/rename
GET /app-api/infra/file/oss/token
GET /app-api/infra/file/page
GET /app-api/infra/file/{configId}/get/**
GET /app-api/infra/location/getById
GET /app-api/jk/auth/getJkToken
GET /app-api/member/address/get
GET /app-api/member/address/get-default
GET /app-api/member/address/list
GET /app-api/member/auth/mini-app-login-heart
GET /app-api/member/auth/social-auth-redirect
GET /app-api/member/recharge-package/list
GET /app-api/member/test/azureTest
GET /app-api/member/test/makeVideoTest
GET /app-api/member/user-favorite/get
GET /app-api/member/user-favorite/list
GET /app-api/member/user-favorite/page
GET /app-api/member/user/execute-profit-user
GET /app-api/member/user/get
GET /app-api/member/user/get-profit-user
GET /app-api/member/user/get-registration
GET /app-api/member/user/get-user-ext
GET /app-api/member/user/getWxgenerateScheme
GET /app-api/member/user/switch-tenant
GET /app-api/project/form/allocateLoad
GET /app-api/project/form/get-project-by-chat
GET /app-api/project/form/get-transformer-list
GET /app-api/project/form/recognition-drawing-status
GET /app-api/project/form/task
GET /app-api/project/form/test-chat-process
GET /app-api/project/form/validateTest
GET /app-api/system/app/tenant/getByInviteCode
GET /app-api/system/app/tenant/getList
GET /app-api/system/area/tree
GET /app-api/system/dept/list
GET /app-api/system/dept/tree
GET /app-api/system/dept/tree-invitecode
GET /app-api/system/dict-data/ad-data
GET /app-api/system/dict-data/biz-info-data
GET /app-api/system/dict-data/elec-regulations-type
GET /app-api/system/dict-data/electricity-usage
GET /app-api/system/dict-data/enterprise-scale
GET /app-api/system/dict-data/get-by-code
GET /app-api/system/dict-data/industry-category
GET /app-api/system/dict-data/project-item
GET /app-api/system/dict-data/project_stage
GET /app-api/system/prompt/get-photovoltaic-prompt-category-list
GET /app-api/system/prompt/get-prompt-category-list
GET /app-api/system/prompt/getHomePageRole
GET /app-api/system/prompt/getHomePageSDModel
GET /app-api/system/prompt/image/list
GET /app-api/system/prompt/image/listLab
GET /app-api/system/prompt/image/listSDLab
GET /app-api/system/prompt/incrementPromptUsedNum
GET /app-api/system/search/regulations/by-id
GET /app-api/system/social-user/check-user-info
GET /app-api/system/user/get-by-deptid
GET /app-api/system/user/list
POST /admin-api/admin/chat/deleteLike
POST /admin-api/admin/chat/getLikePage
POST /admin-api/infra/codegen/create-list
POST /admin-api/infra/config/create
POST /admin-api/infra/data-source-config/create
POST /admin-api/infra/file-config/create
POST /admin-api/infra/job/create
POST /admin-api/infra/oss/get-sts
POST /admin-api/infra/test-demo/create
POST /admin-api/system/aiAccount/create
POST /admin-api/system/aiAccount/import
POST /admin-api/system/aiAccount/update-all-balance
POST /admin-api/system/auth/login-platform
POST /admin-api/system/auth/login-single
POST /admin-api/system/auth/logout
POST /admin-api/system/auth/refresh-token
POST /admin-api/system/couponTemplate/createSystemCouponTemplate
POST /admin-api/system/dept/create
POST /admin-api/system/dict-type/create
POST /admin-api/system/dict/create
POST /admin-api/system/error-code/create
POST /admin-api/system/manager/create
POST /admin-api/system/manager/page
POST /admin-api/system/master-data-construct/add-and-modify-fields
POST /admin-api/system/master-data-construct/alter-object
POST /admin-api/system/master-data-construct/create-object
POST /admin-api/system/master-data-construct/drop-object
POST /admin-api/system/master-data-construct/query-objects
POST /admin-api/system/master-data-construct/show-fields
POST /admin-api/system/master-data-type/pv/add-master-data-type
POST /admin-api/system/master-data-type/pv/query-master-data-type-page
POST /admin-api/system/master-data-value/delete-values
POST /admin-api/system/master-data-value/insert-values
POST /admin-api/system/master-data-value/org/delete-values
POST /admin-api/system/master-data-value/org/insert-values
POST /admin-api/system/master-data-value/org/select-parameter-values
POST /admin-api/system/master-data-value/org/select-values
POST /admin-api/system/master-data-value/org/select-values-by-id
POST /admin-api/system/master-data-value/org/sync-values
POST /admin-api/system/master-data-value/org/update-values
POST /admin-api/system/master-data-value/select-values
POST /admin-api/system/master-data-value/select-values-by-id
POST /admin-api/system/master-data-value/update-values
POST /admin-api/system/master-data/create
POST /admin-api/system/master-data/pv/add-block-type
POST /admin-api/system/master-data/pv/add-component-power
POST /admin-api/system/master-data/pv/add-laying-type
POST /admin-api/system/master-data/pv/add-master-data-value
POST /admin-api/system/master-data/pv/add-optimum-angle
POST /admin-api/system/master-data/pv/add-site-type
POST /admin-api/system/master-data/pv/delete-master-data-value
POST /admin-api/system/master-data/pv/query-master-data-value-page
POST /admin-api/system/master-data/pv/update-master-data-value
POST /admin-api/system/menu/create
POST /admin-api/system/notice/create
POST /admin-api/system/permission/assign-role-data-scope
POST /admin-api/system/permission/assign-user-role
POST /admin-api/system/post/create
POST /admin-api/system/profit-package/create
POST /admin-api/system/prompt-category/create
POST /admin-api/system/prompt-category/page
POST /admin-api/system/prompt/create
POST /admin-api/system/prompt/page
POST /admin-api/system/recharge-package/create
POST /admin-api/system/role/create
POST /admin-api/system/sensitive-word/create
POST /admin-api/system/sms-channel/create
POST /admin-api/system/sms-template/batch-send-sms
POST /admin-api/system/sms-template/check-batch-send-sms
POST /admin-api/system/sms-template/create
POST /admin-api/system/sms-template/send-sms
POST /admin-api/system/social-user/bind
POST /admin-api/system/systemCoupon/createSystemCoupon
POST /admin-api/system/systemCoupon/getSystemCouponList
POST /admin-api/system/systemCoupon/getSystemCouponListPage
POST /admin-api/system/tenant/cert/page
POST /admin-api/system/tenant/create
POST /admin-api/system/tenant/project/page
POST /admin-api/system/user/create-list
POST /admin-api/system/user/create-platform
POST /admin-api/system/user/update
POST /admin-api/system/user/update-role
POST /admin-api/system/user/update-status
POST /admin-api/system/withdraw/create
POST /app-api/app/systemCoupon/getGiveSystemCouponList
POST /app-api/app/systemCoupon/getMemberCouponList
POST /app-api/app/systemCoupon/getMemberCouponListPage
POST /app-api/chat/group/list
POST /app-api/chat/send
POST /app-api/infra/file/upload
POST /app-api/infra/file/uploadFile
POST /app-api/infra/location/alimap-to-img
POST /app-api/infra/location/uploadCsv
POST /app-api/infra/office/word/render
POST /app-api/infra/oss/get-sts
POST /app-api/member/address/create
POST /app-api/member/auth/gen-mini-login-qr
POST /app-api/member/auth/getAppAuth
POST /app-api/member/auth/login
POST /app-api/member/auth/logout
POST /app-api/member/auth/refresh-token
POST /app-api/member/auth/reset-password
POST /app-api/member/auth/send-sms-code
POST /app-api/member/auth/sms-login
POST /app-api/member/auth/social-login
POST /app-api/member/auth/sso-login
POST /app-api/member/auth/sso-login-token
POST /app-api/member/auth/tiktok-mini-app-login
POST /app-api/member/auth/update-password
POST /app-api/member/auth/weixin-mini-app-login
POST /app-api/member/favourite-list/cancel-collect
POST /app-api/member/favourite-list/collect
POST /app-api/member/favourite-list/collect-document
POST /app-api/member/favourite-list/get-collect-document
POST /app-api/member/favourite-list/query-page
POST /app-api/member/test/importExcelSystemPrompt
POST /app-api/member/user-favorite/create
POST /app-api/member/user-favorite/likeOrUnlike
POST /app-api/member/user/add-to-tenant
POST /app-api/member/user/bind-mobile
POST /app-api/member/user/get-profit-benefit
POST /app-api/member/user/get-withdraw-list
POST /app-api/member/user/register
POST /app-api/member/user/update-avatar
POST /app-api/member/user/update-mobile
POST /app-api/member/user/upload-user-avatar
POST /app-api/member/user/withdraw
POST /app-api/member/wx-mp/create-jsapi-signature
POST /app-api/member/wx-mp/decrypt
POST /app-api/member/wx-mp/decrypt-new
POST /app-api/system/app/tenant/create
POST /app-api/system/prompt/getPromptRandomList
POST /app-api/system/prompt/page
POST /app-api/system/prompt/page-for-photovoltaic
POST /app-api/system/search/regulations
POST /app-api/system/search/regulations/list
POST /app-api/system/social-user/bind
POST /app-api/system/social-user/register
POST /app-api/system/template/page
PUT /admin-api/infra/api-error-log/update-status
PUT /admin-api/infra/codegen/sync-from-db
PUT /admin-api/infra/codegen/update
PUT /admin-api/infra/config/update
PUT /admin-api/infra/data-source-config/update
PUT /admin-api/infra/file-config/update
PUT /admin-api/infra/file-config/update-master
PUT /admin-api/infra/job/trigger
PUT /admin-api/infra/job/update
PUT /admin-api/infra/job/update-status
PUT /admin-api/infra/test-demo/update
PUT /admin-api/system/aiAccount/update
PUT /admin-api/system/couponTemplate/updateSystemCouponTemplate
PUT /admin-api/system/dept/update
PUT /admin-api/system/dict-type/update
PUT /admin-api/system/dict/update
PUT /admin-api/system/error-code/update
PUT /admin-api/system/manager/update
PUT /admin-api/system/menu/update
PUT /admin-api/system/notice/update
PUT /admin-api/system/post/update
PUT /admin-api/system/profit-package/update
PUT /admin-api/system/prompt-category/update
PUT /admin-api/system/prompt/update
PUT /admin-api/system/recharge-package/update
PUT /admin-api/system/role/update
PUT /admin-api/system/role/update-status
PUT /admin-api/system/sensitive-word/update
PUT /admin-api/system/sms-channel/update
PUT /admin-api/system/sms-template/update
PUT /admin-api/system/systemCoupon/updateSystemCoupon
PUT /admin-api/system/tenant/cert/create
PUT /admin-api/system/tenant/cert/update
PUT /admin-api/system/tenant/project/create
PUT /admin-api/system/tenant/project/update
PUT /admin-api/system/tenant/update
PUT /admin-api/system/tenant/update-simple
PUT /admin-api/system/user/profile/update
PUT /app-api/member/address/update
PUT /app-api/member/user-favorite/update
PUT /app-api/member/user/update-name
PUT /app-api/member/user/update-nickname
PUT /app-api/project/form/generate-load-calc-book
PUT /app-api/project/form/recognition-drawing
PUT /app-api/project/form/update-cabinet-load-dist
PUT /app-api/project/form/update-cabinet-load-dist-rec
PUT /app-api/project/form/update-cabinet-load-dist-temp
PUT /app-api/project/form/update-project-basic
PUT /app-api/project/form/update-project-basic-temp
PUT /app-api/project/form/update-transformer-conf
PUT /app-api/project/form/update-transformer-conf-rec
PUT /app-api/project/form/update-transformer-conf-temp
PUT /app-api/project/form/update-transformer-load-dist
PUT /app-api/project/form/update-transformer-load-dist-rec
PUT /app-api/project/form/update-transformer-load-dist-temp

Found on 2026-01-10 00:05

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 180.163.146.111
Domain: hnnytestapi.liangceai.net
Port: 80
URL: http://hnnytestapi.liangceai.net

First seen 2025-12-21 13:25
Last seen 2026-01-10 01:10
Open for 19 days

Severity: info
Fingerprint: 5733ddf49ff49cd1a8bcc6e521d88ddc322d6636d69bab412d5f18badece364a

Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html - sample paths:
DELETE /admin-api/infra/codegen/delete
DELETE /admin-api/infra/config/delete
DELETE /admin-api/infra/data-source-config/delete
DELETE /admin-api/infra/file-config/delete
DELETE /admin-api/infra/job/delete
DELETE /admin-api/infra/redis/delete-key
DELETE /admin-api/infra/redis/delete-keys
DELETE /admin-api/infra/test-demo/delete
DELETE /admin-api/system/couponTemplate/deleteSystemCouponTemplate
DELETE /admin-api/system/dept/delete
DELETE /admin-api/system/dict-type/delete
DELETE /admin-api/system/dict/delete
DELETE /admin-api/system/error-code/delete
DELETE /admin-api/system/manager/delete
DELETE /admin-api/system/menu/delete
DELETE /admin-api/system/notice/delete
DELETE /admin-api/system/oauth2-token/delete
DELETE /admin-api/system/post/delete
DELETE /admin-api/system/profit-package/delete
DELETE /admin-api/system/prompt-category/delete
DELETE /admin-api/system/prompt/delete
DELETE /admin-api/system/recharge-package/delete
DELETE /admin-api/system/role/delete
DELETE /admin-api/system/sensitive-word/delete
DELETE /admin-api/system/sms-channel/delete
DELETE /admin-api/system/sms-template/delete
DELETE /admin-api/system/social-user/unbind
DELETE /admin-api/system/systemCoupon/deleteSystemCoupon
DELETE /admin-api/system/systemCoupon/loseSystemCoupon
DELETE /admin-api/system/tenant/cert/delete
DELETE /admin-api/system/tenant/delete
DELETE /admin-api/system/tenant/project/delete
DELETE /admin-api/system/user/delete
DELETE /app-api/infra/file/deleteFile
DELETE /app-api/member/address/delete
DELETE /app-api/member/user-favorite/delete
DELETE /app-api/member/user/delete-user
DELETE /app-api/system/social-user/unbind
GET /admin-api/admin/chat/exportLikeExcel
GET /admin-api/infra/api-access-log/export-excel
GET /admin-api/infra/api-access-log/page
GET /admin-api/infra/api-error-log/export-excel
GET /admin-api/infra/api-error-log/page
GET /admin-api/infra/codegen/db/table/list
GET /admin-api/infra/codegen/detail
GET /admin-api/infra/codegen/download
GET /admin-api/infra/codegen/preview
GET /admin-api/infra/codegen/table/page
GET /admin-api/infra/config/export
GET /admin-api/infra/config/get
GET /admin-api/infra/config/get-value-by-key
GET /admin-api/infra/config/page
GET /admin-api/infra/data-source-config/get
GET /admin-api/infra/data-source-config/list
GET /admin-api/infra/db-doc/export-html
GET /admin-api/infra/db-doc/export-markdown
GET /admin-api/infra/db-doc/export-word
GET /admin-api/infra/file-config/get
GET /admin-api/infra/file-config/page
GET /admin-api/infra/file-config/test
GET /admin-api/infra/file/oss/token
GET /admin-api/infra/job-log/export-excel
GET /admin-api/infra/job-log/get
GET /admin-api/infra/job-log/list
GET /admin-api/infra/job-log/page
GET /admin-api/infra/job/export-excel
GET /admin-api/infra/job/get
GET /admin-api/infra/job/get_next_times
GET /admin-api/infra/job/list
GET /admin-api/infra/job/page
GET /admin-api/infra/redis/get-key-define-list
GET /admin-api/infra/redis/get-key-list
GET /admin-api/infra/redis/get-key-value
GET /admin-api/infra/redis/get-monitor-info
GET /admin-api/infra/test-demo/export-excel
GET /admin-api/infra/test-demo/get
GET /admin-api/infra/test-demo/list
GET /admin-api/infra/test-demo/page
GET /admin-api/member/user/get-by-mobile
GET /admin-api/product/**
GET /admin-api/promotion/**
GET /admin-api/report/**
GET /admin-api/system/aiAccount/get-import-template
GET /admin-api/system/aiAccount/page
GET /admin-api/system/auth/get-permission-info
GET /admin-api/system/couponTemplate/getSystemCouponTemplate
GET /admin-api/system/couponTemplate/getSystemCouponTemplateList
GET /admin-api/system/couponTemplate/getTemplateListByType
GET /admin-api/system/dept/get
GET /admin-api/system/dept/list
GET /admin-api/system/dept/list-all-simple
GET /admin-api/system/dept/tree
GET /admin-api/system/dict-data/ea-not-pass-reason
GET /admin-api/system/dict-data/enterprise-scale
GET /admin-api/system/dict-data/indicator-type
GET /admin-api/system/dict-data/industry-category
GET /admin-api/system/dict-data/project-item
GET /admin-api/system/dict-data/qualification-type
GET /admin-api/system/dict-type/export
GET /admin-api/system/dict-type/get
GET /admin-api/system/dict-type/list-all-simple
GET /admin-api/system/dict-type/page
GET /admin-api/system/dict/get
GET /admin-api/system/dict/list-all-simple
GET /admin-api/system/dict/page
GET /admin-api/system/error-code/export-excel
GET /admin-api/system/error-code/get
GET /admin-api/system/error-code/page
GET /admin-api/system/login-log/export
GET /admin-api/system/login-log/page
GET /admin-api/system/manager/get
GET /admin-api/system/master-data-test/solar-gis-test
GET /admin-api/system/master-data-test/value-query-test
GET /admin-api/system/menu/get
GET /admin-api/system/menu/list
GET /admin-api/system/notice/get
GET /admin-api/system/notice/page
GET /admin-api/system/oauth2-token/page
GET /admin-api/system/operate-log/export
GET /admin-api/system/operate-log/page
GET /admin-api/system/permission/list-role-resources
GET /admin-api/system/permission/list-user-roles
GET /admin-api/system/post/export
GET /admin-api/system/post/get
GET /admin-api/system/post/list-all-simple
GET /admin-api/system/post/page
GET /admin-api/system/profit-package/get
GET /admin-api/system/profit-package/page
GET /admin-api/system/prompt-category/get
GET /admin-api/system/prompt/get
GET /admin-api/system/recharge-package/get
GET /admin-api/system/recharge-package/page
GET /admin-api/system/role/get
GET /admin-api/system/role/list-all-simple
GET /admin-api/system/role/page
GET /admin-api/system/sensitive-word/export-excel
GET /admin-api/system/sensitive-word/get
GET /admin-api/system/sensitive-word/get-tags
GET /admin-api/system/sensitive-word/page
GET /admin-api/system/sensitive-word/validate-text
GET /admin-api/system/sms-channel/get
GET /admin-api/system/sms-channel/list-all-simple
GET /admin-api/system/sms-channel/page
GET /admin-api/system/sms-log/export-excel
GET /admin-api/system/sms-log/page
GET /admin-api/system/sms-template/export-excel
GET /admin-api/system/sms-template/get
GET /admin-api/system/sms-template/page
GET /admin-api/system/systemCoupon/getAppTemplateByType
GET /admin-api/system/systemCoupon/getByMobile
GET /admin-api/system/systemCoupon/getProfitUserById
GET /admin-api/system/systemCoupon/getSystemCoupon
GET /admin-api/system/tenant/cert/get-by-id
GET /admin-api/system/tenant/get
GET /admin-api/system/tenant/get-id-by-name
GET /admin-api/system/tenant/get-invite-code
GET /admin-api/system/tenant/page
GET /admin-api/system/tenant/project/get
GET /admin-api/system/user/create-pre-check
GET /admin-api/system/user/get-by-deptid
GET /admin-api/system/user/get-role
GET /admin-api/system/user/list
GET /admin-api/system/user/list-all-simple
GET /admin-api/system/user/page
GET /admin-api/system/withdraw/get
GET /admin-api/trade/**
GET /app-api/app/systemCoupon/giveMemberCoupon
GET /app-api/chat/group/create
GET /app-api/chat/group/delete
GET /app-api/chat/group/list-within-thirty-days
GET /app-api/chat/group/message/get-message
GET /app-api/chat/group/message/query-history-messages
GET /app-api/chat/group/rename
GET /app-api/infra/file/oss/token
GET /app-api/infra/file/page
GET /app-api/infra/file/{configId}/get/**
GET /app-api/infra/location/getById
GET /app-api/jk/auth/getJkToken
GET /app-api/member/address/get
GET /app-api/member/address/get-default
GET /app-api/member/address/list
GET /app-api/member/auth/mini-app-login-heart
GET /app-api/member/auth/social-auth-redirect
GET /app-api/member/recharge-package/list
GET /app-api/member/test/azureTest
GET /app-api/member/test/makeVideoTest
GET /app-api/member/user-favorite/get
GET /app-api/member/user-favorite/list
GET /app-api/member/user-favorite/page
GET /app-api/member/user/execute-profit-user
GET /app-api/member/user/get
GET /app-api/member/user/get-profit-user
GET /app-api/member/user/get-registration
GET /app-api/member/user/get-user-ext
GET /app-api/member/user/getWxgenerateScheme
GET /app-api/member/user/switch-tenant
GET /app-api/project/form/allocateLoad
GET /app-api/project/form/get-project-by-chat
GET /app-api/project/form/get-transformer-list
GET /app-api/project/form/recognition-drawing-status
GET /app-api/project/form/task
GET /app-api/project/form/test-chat-process
GET /app-api/project/form/validateTest
GET /app-api/system/app/tenant/getByInviteCode
GET /app-api/system/app/tenant/getList
GET /app-api/system/area/tree
GET /app-api/system/dept/list
GET /app-api/system/dept/tree
GET /app-api/system/dept/tree-invitecode
GET /app-api/system/dict-data/ad-data
GET /app-api/system/dict-data/biz-info-data
GET /app-api/system/dict-data/elec-regulations-type
GET /app-api/system/dict-data/electricity-usage
GET /app-api/system/dict-data/enterprise-scale
GET /app-api/system/dict-data/get-by-code
GET /app-api/system/dict-data/industry-category
GET /app-api/system/dict-data/project-item
GET /app-api/system/dict-data/project_stage
GET /app-api/system/prompt/get-photovoltaic-prompt-category-list
GET /app-api/system/prompt/get-prompt-category-list
GET /app-api/system/prompt/getHomePageRole
GET /app-api/system/prompt/getHomePageSDModel
GET /app-api/system/prompt/image/list
GET /app-api/system/prompt/image/listLab
GET /app-api/system/prompt/image/listSDLab
GET /app-api/system/prompt/incrementPromptUsedNum
GET /app-api/system/search/regulations/by-id
GET /app-api/system/social-user/check-user-info
GET /app-api/system/user/get-by-deptid
GET /app-api/system/user/list
POST /admin-api/admin/chat/deleteLike
POST /admin-api/admin/chat/getLikePage
POST /admin-api/infra/codegen/create-list
POST /admin-api/infra/config/create
POST /admin-api/infra/data-source-config/create
POST /admin-api/infra/file-config/create
POST /admin-api/infra/job/create
POST /admin-api/infra/oss/get-sts
POST /admin-api/infra/test-demo/create
POST /admin-api/system/aiAccount/create
POST /admin-api/system/aiAccount/import
POST /admin-api/system/aiAccount/update-all-balance
POST /admin-api/system/auth/login-platform
POST /admin-api/system/auth/login-single
POST /admin-api/system/auth/logout
POST /admin-api/system/auth/refresh-token
POST /admin-api/system/couponTemplate/createSystemCouponTemplate
POST /admin-api/system/dept/create
POST /admin-api/system/dict-type/create
POST /admin-api/system/dict/create
POST /admin-api/system/error-code/create
POST /admin-api/system/manager/create
POST /admin-api/system/manager/page
POST /admin-api/system/master-data-construct/add-and-modify-fields
POST /admin-api/system/master-data-construct/alter-object
POST /admin-api/system/master-data-construct/create-object
POST /admin-api/system/master-data-construct/drop-object
POST /admin-api/system/master-data-construct/query-objects
POST /admin-api/system/master-data-construct/show-fields
POST /admin-api/system/master-data-type/pv/add-master-data-type
POST /admin-api/system/master-data-type/pv/query-master-data-type-page
POST /admin-api/system/master-data-value/delete-values
POST /admin-api/system/master-data-value/insert-values
POST /admin-api/system/master-data-value/org/delete-values
POST /admin-api/system/master-data-value/org/insert-values
POST /admin-api/system/master-data-value/org/select-parameter-values
POST /admin-api/system/master-data-value/org/select-values
POST /admin-api/system/master-data-value/org/select-values-by-id
POST /admin-api/system/master-data-value/org/sync-values
POST /admin-api/system/master-data-value/org/update-values
POST /admin-api/system/master-data-value/select-values
POST /admin-api/system/master-data-value/select-values-by-id
POST /admin-api/system/master-data-value/update-values
POST /admin-api/system/master-data/create
POST /admin-api/system/master-data/pv/add-block-type
POST /admin-api/system/master-data/pv/add-component-power
POST /admin-api/system/master-data/pv/add-laying-type
POST /admin-api/system/master-data/pv/add-master-data-value
POST /admin-api/system/master-data/pv/add-optimum-angle
POST /admin-api/system/master-data/pv/add-site-type
POST /admin-api/system/master-data/pv/delete-master-data-value
POST /admin-api/system/master-data/pv/query-master-data-value-page
POST /admin-api/system/master-data/pv/update-master-data-value
POST /admin-api/system/menu/create
POST /admin-api/system/notice/create
POST /admin-api/system/permission/assign-role-data-scope
POST /admin-api/system/permission/assign-user-role
POST /admin-api/system/post/create
POST /admin-api/system/profit-package/create
POST /admin-api/system/prompt-category/create
POST /admin-api/system/prompt-category/page
POST /admin-api/system/prompt/create
POST /admin-api/system/prompt/page
POST /admin-api/system/recharge-package/create
POST /admin-api/system/role/create
POST /admin-api/system/sensitive-word/create
POST /admin-api/system/sms-channel/create
POST /admin-api/system/sms-template/batch-send-sms
POST /admin-api/system/sms-template/check-batch-send-sms
POST /admin-api/system/sms-template/create
POST /admin-api/system/sms-template/send-sms
POST /admin-api/system/social-user/bind
POST /admin-api/system/systemCoupon/createSystemCoupon
POST /admin-api/system/systemCoupon/getSystemCouponList
POST /admin-api/system/systemCoupon/getSystemCouponListPage
POST /admin-api/system/tenant/cert/page
POST /admin-api/system/tenant/create
POST /admin-api/system/tenant/project/page
POST /admin-api/system/user/create-list
POST /admin-api/system/user/create-platform
POST /admin-api/system/user/update
POST /admin-api/system/user/update-role
POST /admin-api/system/user/update-status
POST /admin-api/system/withdraw/create
POST /app-api/app/systemCoupon/getGiveSystemCouponList
POST /app-api/app/systemCoupon/getMemberCouponList
POST /app-api/app/systemCoupon/getMemberCouponListPage
POST /app-api/chat/group/list
POST /app-api/chat/send
POST /app-api/infra/file/upload
POST /app-api/infra/file/uploadFile
POST /app-api/infra/location/alimap-to-img
POST /app-api/infra/location/uploadCsv
POST /app-api/infra/office/word/render
POST /app-api/infra/oss/get-sts
POST /app-api/member/address/create
POST /app-api/member/auth/gen-mini-login-qr
POST /app-api/member/auth/getAppAuth
POST /app-api/member/auth/login
POST /app-api/member/auth/logout
POST /app-api/member/auth/refresh-token
POST /app-api/member/auth/reset-password
POST /app-api/member/auth/send-sms-code
POST /app-api/member/auth/sms-login
POST /app-api/member/auth/social-login
POST /app-api/member/auth/sso-login
POST /app-api/member/auth/sso-login-token
POST /app-api/member/auth/tiktok-mini-app-login
POST /app-api/member/auth/update-password
POST /app-api/member/auth/weixin-mini-app-login
POST /app-api/member/favourite-list/cancel-collect
POST /app-api/member/favourite-list/collect
POST /app-api/member/favourite-list/collect-document
POST /app-api/member/favourite-list/get-collect-document
POST /app-api/member/favourite-list/query-page
POST /app-api/member/test/importExcelSystemPrompt
POST /app-api/member/user-favorite/create
POST /app-api/member/user-favorite/likeOrUnlike
POST /app-api/member/user/add-to-tenant
POST /app-api/member/user/bind-mobile
POST /app-api/member/user/get-profit-benefit
POST /app-api/member/user/get-withdraw-list
POST /app-api/member/user/register
POST /app-api/member/user/update-avatar
POST /app-api/member/user/update-mobile
POST /app-api/member/user/upload-user-avatar
POST /app-api/member/user/withdraw
POST /app-api/member/wx-mp/create-jsapi-signature
POST /app-api/member/wx-mp/decrypt
POST /app-api/member/wx-mp/decrypt-new
POST /app-api/system/app/tenant/create
POST /app-api/system/prompt/getPromptRandomList
POST /app-api/system/prompt/page
POST /app-api/system/prompt/page-for-photovoltaic
POST /app-api/system/search/regulations
POST /app-api/system/search/regulations/list
POST /app-api/system/social-user/bind
POST /app-api/system/social-user/register
POST /app-api/system/template/page
PUT /admin-api/infra/api-error-log/update-status
PUT /admin-api/infra/codegen/sync-from-db
PUT /admin-api/infra/codegen/update
PUT /admin-api/infra/config/update
PUT /admin-api/infra/data-source-config/update
PUT /admin-api/infra/file-config/update
PUT /admin-api/infra/file-config/update-master
PUT /admin-api/infra/job/trigger
PUT /admin-api/infra/job/update
PUT /admin-api/infra/job/update-status
PUT /admin-api/infra/test-demo/update
PUT /admin-api/system/aiAccount/update
PUT /admin-api/system/couponTemplate/updateSystemCouponTemplate
PUT /admin-api/system/dept/update
PUT /admin-api/system/dict-type/update
PUT /admin-api/system/dict/update
PUT /admin-api/system/error-code/update
PUT /admin-api/system/manager/update
PUT /admin-api/system/menu/update
PUT /admin-api/system/notice/update
PUT /admin-api/system/post/update
PUT /admin-api/system/profit-package/update
PUT /admin-api/system/prompt-category/update
PUT /admin-api/system/prompt/update
PUT /admin-api/system/recharge-package/update
PUT /admin-api/system/role/update
PUT /admin-api/system/role/update-status
PUT /admin-api/system/sensitive-word/update
PUT /admin-api/system/sms-channel/update
PUT /admin-api/system/sms-template/update
PUT /admin-api/system/systemCoupon/updateSystemCoupon
PUT /admin-api/system/tenant/cert/create
PUT /admin-api/system/tenant/cert/update
PUT /admin-api/system/tenant/project/create
PUT /admin-api/system/tenant/project/update
PUT /admin-api/system/tenant/update
PUT /admin-api/system/tenant/update-simple
PUT /admin-api/system/user/profile/update
PUT /app-api/member/address/update
PUT /app-api/member/user-favorite/update
PUT /app-api/member/user/update-name
PUT /app-api/member/user/update-nickname
PUT /app-api/project/form/generate-load-calc-book
PUT /app-api/project/form/recognition-drawing
PUT /app-api/project/form/update-cabinet-load-dist
PUT /app-api/project/form/update-cabinet-load-dist-rec
PUT /app-api/project/form/update-cabinet-load-dist-temp
PUT /app-api/project/form/update-project-basic
PUT /app-api/project/form/update-project-basic-temp
PUT /app-api/project/form/update-transformer-conf
PUT /app-api/project/form/update-transformer-conf-rec
PUT /app-api/project/form/update-transformer-conf-temp
PUT /app-api/project/form/update-transformer-load-dist
PUT /app-api/project/form/update-transformer-load-dist-rec
PUT /app-api/project/form/update-transformer-load-dist-temp

Found on 2026-01-10 01:10

Severity: info
Fingerprint: 5733ddf49ff49cd1926e27d0926e27d0926e27d0926e27d0926e27d0926e27d0
```
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html
```
Found on 2025-12-21 13:25

Create report

Open service 180.163.146.111:80 · hnnytestapi.liangceai.net

2026-01-23 10:42

HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/json;charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
trace-id: 
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
Date: Fri, 23 Jan 2026 10:42:14 GMT
Via: cache10.l2cn8813[92,92,200-0,M], cache32.l2cn8813[93,0], kunlun3.cn7174[110,110,200-0,M], kunlun1.cn7174[114,0]
X-Ali-Tproxy-Consistent-Hash-Hot: 1
Ali-Swift-Global-Savetime: 1769164934
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Fri, 23 Jan 2026 10:42:14 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: b4a3921517691649347183118e


{"code":401,"data":null,"msg":"账号未登录"}

Found 2026-01-23 by HttpPlugin

Create report

Open service 180.163.146.111:443 · hnnytestapi.liangceai.net

2026-01-23 07:05

HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/json;charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
trace-id: 
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
Date: Fri, 23 Jan 2026 07:05:57 GMT
Via: cache10.l2cn8813[84,83,200-0,M], cache63.l2cn8813[85,0], kunlun3.cn7174[102,102,200-0,M], kunlun1.cn7174[107,0]
X-Ali-Tproxy-Consistent-Hash-Hot: 1
Ali-Swift-Global-Savetime: 1769151958
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Fri, 23 Jan 2026 07:05:58 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: b4a3921517691519581904250e


{"code":401,"data":null,"msg":"账号未登录"}

Found 2026-01-23 by HttpPlugin

Create report

Open service 180.163.146.111:80 · hnnytestapi.liangceai.net

2026-01-10 01:10

HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/json;charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
trace-id: 
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
Date: Sat, 10 Jan 2026 01:10:33 GMT
Via: cache10.l2cn8813[72,72,200-0,M], cache29.l2cn8813[75,0], kunlun3.cn7174[89,90,200-0,M], kunlun9.cn7174[93,0]
X-Ali-Tproxy-Consistent-Hash-Hot: 1
Ali-Swift-Global-Savetime: 1768007433
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Sat, 10 Jan 2026 01:10:33 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: b4a3921d17680074333763560e


{"code":401,"data":null,"msg":"账号未登录"}

Found 2026-01-10 by HttpPlugin

Create report

hnnytestapi.liangceai.netwww.hnnytestapi.liangceai.net

Fingerprint:

4d471c42f611d61a20b2dec28bb0f85365926e3391bfcebe3cd49d77858eb462

CN:

hnnytestapi.liangceai.net

Key:

RSA-2048

Issuer:

Encryption Everywhere DV TLS CA - G2

Not before:

2025-12-15 00:00

Not after:

2026-03-14 23:59

Domain summary

hnnytestapi.liangceai.net 6

1 recorded

IP summary

180.163.146.111 2

1 recorded