Kestrel
tcp/443
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549e84e066db573e044cd4d79b261f1daa1622ca064
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/Configuration/redisCacheKey/{cacheKey}
GET /Auth/login
GET /Auth/logout
GET /api/AppConfig
GET /api/Configuration/redisCacheKeys
GET /api/HealthCheck
GET /api/Product/department/{department}/categories
GET /api/Product/product/barcodes
GET /api/Product/product/brands
GET /api/Product/product/buyingdepartments
GET /api/Product/product/statuses
GET /api/Product/{plu}
GET /api/Product/{plu}/contacts
GET /api/Product/{plu}/productBuyingHierarchy
GET /api/Product/{plu}/productCaseSize
GET /api/Product/{plu}/productDimensions
GET /api/Product/{plu}/productLink
GET /api/Product/{plu}/productName
GET /api/Product/{plu}/ranging
GET /api/Product/{plu}/shelfLife
GET /api/ProductAttribute/{plu}/attributes
GET /api/ProductAttribute/{plu}/groupAssociations
GET /api/ProductInternational/{plu}/international
GET /api/ProductPricing/{plu}/companySellPrice
GET /api/ProductPricing/{plu}/productCostPrices
GET /api/ProductPricing/{plu}/productUnitPricing
GET /api/ProductPricing/{plu}/segmentPrices
GET /api/ProductPromotion/plu/{plu}/all
GET /api/ProductSpecifications/productSpecifications/nutrition/{plu}
GET /api/ProductSupplier/api/product/supplier/active
GET /api/Profile
GET /api/User
POST /api/Product/productSummary
POST /api/ProductParentToParent
POST /api/ProductPricing/priceCheck
Open service 2.18.244.92:443 · lens-uat.icelanddev.net
2026-01-23 07:56
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: text/html
ETag: "1dbc41a8e1cadf0"
Last-Modified: Tue, 13 May 2025 15:20:27 GMT
Server: Kestrel
X-Akamai-Transformed: 9 624 0 pmb=mRUM,1
Date: Fri, 23 Jan 2026 07:56:40 GMT
Content-Length: 3721
Connection: close
Set-Cookie: acaAffinity="2d3ae322abbdae3b"; Path=/; HttpOnly; SameSite=None; Secure;
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=170
Server-Timing: origin; dur=14002
Feature-Policy: accelerometer 'self'; camera 'self'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'self'
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Access-Control-Allow-Origin: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
Content-Security-Policy: upgrade-insecure-requests
Server-Timing: ak_p; desc="1769154986412_34639388_27042473_1414516_4657_18_69_-";dur=1
Page title: LENS
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<link rel="icon" href="/favicon.ico">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<base href="/" />
<title>LENS</title>
<script type="module" crossorigin src="/assets/index-Dn6LLunJ.js"></script>
<link rel="stylesheet" crossorigin href="/assets/index-Dkgsmgq8.css">
<script>!function(a){var e="https://s.go-mpulse.net/boomerang/",t="addEventListener";if("False"=="True")a.BOOMR_config=a.BOOMR_config||{},a.BOOMR_config.PageParams=a.BOOMR_config.PageParams||{},a.BOOMR_config.PageParams.pci=!0,e="https://s2.go-mpulse.net/boomerang/";if(window.BOOMR_API_key="DKKD8-TNZWF-KV2ZK-ERU7A-7GV3S",function(){function n(e){a.BOOMR_onload=e&&e.timeStamp||(new Date).getTime()}if(!a.BOOMR||!a.BOOMR.version&&!a.BOOMR.snippetExecuted){a.BOOMR=a.BOOMR||{},a.BOOMR.snippetExecuted=!0;var i,_,o,r=document.createElement("iframe");if(a[t])a[t]("load",n,!1);else if(a.attachEvent)a.attachEvent("onload",n);r.src="javascript:void(0)",r.title="",r.role="presentation",(r.frameElement||r).style.cssText="width:0;height:0;border:0;display:none;",o=document.getElementsByTagName("script")[0],o.parentNode.insertBefore(r,o);try{_=r.contentWindow.document}catch(O){i=document.domain,r.src="javascript:var d=document.open();d.domain='"+i+"';void(0);",_=r.contentWindow.document}_.open()._l=function(){var a=this.createElement("script");if(i)this.domain=i;a.id="boomr-if-as",a.src=e+"DKKD8-TNZWF-KV2ZK-ERU7A-7GV3S",BOOMR_lstart=(new Date).getTime(),this.body.appendChild(a)},_.write("<bo"+'dy onload="document._l();">'),_.close()}}(),"".length>0)if(a&&"performance"in a&&a.performance&&"function"==typeof a.performance.setResourceTimingBufferSize)a.performance.setResourceTimingBufferSize();!function(){if(BOOMR=a.BOOMR||{},BOOMR.plugins=BOOMR.plugins||{},!BOOMR.plugins.AK){var e=""=="true"?1:0,t="",n="fzsw7oiccl2fy2ltfgva-f-070a93397-clientnsv4-s.akamaihd.net",i="false"=="true"?2:1,_={"ak.v":"39","ak.cp":"1590617","ak.ai":parseInt("1021394",10),"ak.ol":"0","ak.cr":18,"ak.ipv":4,"ak.proto":"http/1.1","ak.rid":"19ca2a9","ak.r":47809,"ak.a2":e,"ak.m":"","ak.n":"essl","ak.bpcip":"46.101.111.0","ak.cport":59576,"ak.gh":"2.16.142.28","ak.quicv":"","ak.tlsv":"tls1.3","ak.0rtt":"","ak.0rtt.ed":"","ak.csrc":"-","ak.acc":"bbr","ak.t":"1769154986","ak.ak":"hOBiQwZUYzCg5VSAfCLimQ==X1zR97rGfPfGcuZCrBhes9bRTE1Mz0EahuLBOBXAGSrjAat8xtg3j0qCjKTXoULdiYgY9i5uKj0wK+LZ0K9+ZFC5dQ+kqtXXr09wZBYe4Qh1zCdMv4/PoGR67oZdbZTjuhV4ckEuCEJLoAa7EN/QBM6IjJkkHTI7ClyoZi/Fznb38s1eXC0NM7X6l8IkxBgyYlUyrCJ9mcv/+oI4a68TPmj9lKmNqw4S6d6umTWZefPaOVoYcs3pVAk6gGajOUdziVhl1p67sgTwu8CgOLgb7f21/9+SG3uc6eNbMO2iM6wAwFFIyYavF2mEryq3xMjZhkHz8qSaBEknD14ilKnrGISqWL0OkQhPLazdkO0P5y3OTMIBFYOIz9mkqYO7v+h8Wa6npKuBSYIJGPTBVpInIwG60/7+xshI9rI4vHjOA5E=","ak.pv":"1","ak.dpoabenc":"","ak.tf":i};if(""!==t)_["ak.ruds"]=t;var o={i:!1,av:function(e){var t="http.initiator";if(e&&(!e[t]||"spa_hard"===e[t]))_["ak.feo"]=void 0!==a.aFeoApplied?1:0,BOOMR.addVar(_)},rv:function(){var a=["ak.bpcip","ak.cport","ak.cr","ak.csrc","ak.gh","ak.ipv","ak.m","ak.n","ak.ol","ak.proto","ak.quicv","ak.tlsv","ak.0rtt","ak.0rtt.ed","ak.r","ak.acc","ak.t","ak.tf"];BOOMR.removeVar(a)}};BOOMR.plugins.AK={akVars:_,akDNSPreFetchDomain:n,init:function(){if(!o.i){var a=BOOMR.subscribe;a("before_beacon",o.av,null,null),a("onbeacon",o.rv,null,null),o.i=!0}return this},is_complete:function(){return!0}}}}()}(window);</script></head>
<body>
<div id="app"></div>
<script>
if ('serviceWorker' in navigator) {
navigator.serviceWorker.register(
'/sw.js'
);
}
</script>
</body>
</html>
Open service 2.18.244.92:443 · lens-uat.icelanddev.net
2026-01-09 22:54
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: text/html
ETag: "1dbc41a8e1cadf0"
Last-Modified: Tue, 13 May 2025 15:20:27 GMT
Server: Kestrel
X-Akamai-Transformed: 9 624 0 pmb=mRUM,1
Date: Fri, 09 Jan 2026 22:54:32 GMT
Content-Length: 3725
Connection: close
Set-Cookie: acaAffinity="9d0100a1b2e1dc2e"; Path=/; HttpOnly; SameSite=None; Secure;
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=41
Server-Timing: origin; dur=12420
Feature-Policy: accelerometer 'self'; camera 'self'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'self'
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Access-Control-Allow-Origin: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
Content-Security-Policy: upgrade-insecure-requests
Server-Timing: ak_p; desc="1767999259727_34639388_108666387_1243734_2919_75_77_-";dur=1
Page title: LENS
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<link rel="icon" href="/favicon.ico">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<base href="/" />
<title>LENS</title>
<script type="module" crossorigin src="/assets/index-Dn6LLunJ.js"></script>
<link rel="stylesheet" crossorigin href="/assets/index-Dkgsmgq8.css">
<script>!function(a){var e="https://s.go-mpulse.net/boomerang/",t="addEventListener";if("False"=="True")a.BOOMR_config=a.BOOMR_config||{},a.BOOMR_config.PageParams=a.BOOMR_config.PageParams||{},a.BOOMR_config.PageParams.pci=!0,e="https://s2.go-mpulse.net/boomerang/";if(window.BOOMR_API_key="DKKD8-TNZWF-KV2ZK-ERU7A-7GV3S",function(){function n(e){a.BOOMR_onload=e&&e.timeStamp||(new Date).getTime()}if(!a.BOOMR||!a.BOOMR.version&&!a.BOOMR.snippetExecuted){a.BOOMR=a.BOOMR||{},a.BOOMR.snippetExecuted=!0;var i,_,o,r=document.createElement("iframe");if(a[t])a[t]("load",n,!1);else if(a.attachEvent)a.attachEvent("onload",n);r.src="javascript:void(0)",r.title="",r.role="presentation",(r.frameElement||r).style.cssText="width:0;height:0;border:0;display:none;",o=document.getElementsByTagName("script")[0],o.parentNode.insertBefore(r,o);try{_=r.contentWindow.document}catch(O){i=document.domain,r.src="javascript:var d=document.open();d.domain='"+i+"';void(0);",_=r.contentWindow.document}_.open()._l=function(){var a=this.createElement("script");if(i)this.domain=i;a.id="boomr-if-as",a.src=e+"DKKD8-TNZWF-KV2ZK-ERU7A-7GV3S",BOOMR_lstart=(new Date).getTime(),this.body.appendChild(a)},_.write("<bo"+'dy onload="document._l();">'),_.close()}}(),"".length>0)if(a&&"performance"in a&&a.performance&&"function"==typeof a.performance.setResourceTimingBufferSize)a.performance.setResourceTimingBufferSize();!function(){if(BOOMR=a.BOOMR||{},BOOMR.plugins=BOOMR.plugins||{},!BOOMR.plugins.AK){var e=""=="true"?1:0,t="",n="uxrvidqccl2fy2lbq4nq-f-3a85a5a76-clientnsv4-s.akamaihd.net",i="false"=="true"?2:1,_={"ak.v":"39","ak.cp":"1590617","ak.ai":parseInt("1021394",10),"ak.ol":"0","ak.cr":75,"ak.ipv":4,"ak.proto":"http/1.1","ak.rid":"67a1e13","ak.r":47809,"ak.a2":e,"ak.m":"dscb","ak.n":"essl","ak.bpcip":"165.227.84.0","ak.cport":37854,"ak.gh":"2.16.142.28","ak.quicv":"","ak.tlsv":"tls1.3","ak.0rtt":"","ak.0rtt.ed":"","ak.csrc":"-","ak.acc":"bbr","ak.t":"1767999259","ak.ak":"hOBiQwZUYzCg5VSAfCLimQ==QDRE8mywtCci5MohLbv2ri9ewI0xS7eKFAfGW/iQKbgUPwSw7RuacK9sROI3e+698nYh0sVbEs8ZIYWWW42ir007xsUrZAEKfmESv1x5qAAezZDYAqHerDTJJEC+6YUuHdp+YZ3F5M97H260NsR6v3A5Qo1GNp+JB1lN8zEs3D0R+4+Qluv10m26DnH0OLCmrMllkHX/D7ON9L+8E5igyAxLSah6ba/IgQdu85r9pn6K3gWdjMvje0XJHe45wnq4cdxlXnJHzaPYcbJo3Cj86Ssd6SstgmNLw3UycOKVJ+9Bq7dvkYDkx/lUy1Xp6a/b7rXYs1xVIoTQAuM/MrpEwJponxKe8zDk6LGUpwY2IwaxhE/nbFJUHodOCxEFBKZTuv0FOiIJ5bzKkyIvq8PvubSy7mrepCRQCnImG0Av0i0=","ak.pv":"1","ak.dpoabenc":"","ak.tf":i};if(""!==t)_["ak.ruds"]=t;var o={i:!1,av:function(e){var t="http.initiator";if(e&&(!e[t]||"spa_hard"===e[t]))_["ak.feo"]=void 0!==a.aFeoApplied?1:0,BOOMR.addVar(_)},rv:function(){var a=["ak.bpcip","ak.cport","ak.cr","ak.csrc","ak.gh","ak.ipv","ak.m","ak.n","ak.ol","ak.proto","ak.quicv","ak.tlsv","ak.0rtt","ak.0rtt.ed","ak.r","ak.acc","ak.t","ak.tf"];BOOMR.removeVar(a)}};BOOMR.plugins.AK={akVars:_,akDNSPreFetchDomain:n,init:function(){if(!o.i){var a=BOOMR.subscribe;a("before_beacon",o.av,null,null),a("onbeacon",o.rv,null,null),o.i=!0}return this},is_complete:function(){return!0}}}}()}(window);</script></head>
<body>
<div id="app"></div>
<script>
if ('serviceWorker' in navigator) {
navigator.serviceWorker.register(
'/sw.js'
);
}
</script>
</body>
</html>
Open service 2.18.244.92:443 · lens-uat.icelanddev.net
2025-12-22 13:11
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: text/html
ETag: "1dbc41a8e1cadf0"
Last-Modified: Tue, 13 May 2025 15:20:27 GMT
Server: Kestrel
X-Akamai-Transformed: 9 624 0 pmb=mRUM,1
Date: Mon, 22 Dec 2025 13:11:41 GMT
Content-Length: 3720
Connection: close
Set-Cookie: acaAffinity="7a32a0ac44311afb"; Path=/; HttpOnly; SameSite=None; Secure;
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=155
Server-Timing: origin; dur=16910
Feature-Policy: accelerometer 'self'; camera 'self'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'self'
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Access-Control-Allow-Origin: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
Content-Security-Policy: upgrade-insecure-requests
Server-Timing: ak_p; desc="1766409084289_34639388_843307563_1703277_3498_81_103_-";dur=1
Page title: LENS
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<link rel="icon" href="/favicon.ico">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<base href="/" />
<title>LENS</title>
<script type="module" crossorigin src="/assets/index-Dn6LLunJ.js"></script>
<link rel="stylesheet" crossorigin href="/assets/index-Dkgsmgq8.css">
<script>!function(a){var e="https://s.go-mpulse.net/boomerang/",t="addEventListener";if("False"=="True")a.BOOMR_config=a.BOOMR_config||{},a.BOOMR_config.PageParams=a.BOOMR_config.PageParams||{},a.BOOMR_config.PageParams.pci=!0,e="https://s2.go-mpulse.net/boomerang/";if(window.BOOMR_API_key="DKKD8-TNZWF-KV2ZK-ERU7A-7GV3S",function(){function n(e){a.BOOMR_onload=e&&e.timeStamp||(new Date).getTime()}if(!a.BOOMR||!a.BOOMR.version&&!a.BOOMR.snippetExecuted){a.BOOMR=a.BOOMR||{},a.BOOMR.snippetExecuted=!0;var i,_,o,r=document.createElement("iframe");if(a[t])a[t]("load",n,!1);else if(a.attachEvent)a.attachEvent("onload",n);r.src="javascript:void(0)",r.title="",r.role="presentation",(r.frameElement||r).style.cssText="width:0;height:0;border:0;display:none;",o=document.getElementsByTagName("script")[0],o.parentNode.insertBefore(r,o);try{_=r.contentWindow.document}catch(O){i=document.domain,r.src="javascript:var d=document.open();d.domain='"+i+"';void(0);",_=r.contentWindow.document}_.open()._l=function(){var a=this.createElement("script");if(i)this.domain=i;a.id="boomr-if-as",a.src=e+"DKKD8-TNZWF-KV2ZK-ERU7A-7GV3S",BOOMR_lstart=(new Date).getTime(),this.body.appendChild(a)},_.write("<bo"+'dy onload="document._l();">'),_.close()}}(),"".length>0)if(a&&"performance"in a&&a.performance&&"function"==typeof a.performance.setResourceTimingBufferSize)a.performance.setResourceTimingBufferSize();!function(){if(BOOMR=a.BOOMR||{},BOOMR.plugins=BOOMR.plugins||{},!BOOMR.plugins.AK){var e=""=="true"?1:0,t="",n="rzoqaqqccl2fy2kjin6a-f-a64b05e2b-clientnsv4-s.akamaihd.net",i="false"=="true"?2:1,_={"ak.v":"39","ak.cp":"1590617","ak.ai":parseInt("1021394",10),"ak.ol":"0","ak.cr":81,"ak.ipv":4,"ak.proto":"http/1.1","ak.rid":"3243da2b","ak.r":47809,"ak.a2":e,"ak.m":"","ak.n":"essl","ak.bpcip":"142.93.0.0","ak.cport":43520,"ak.gh":"2.16.142.28","ak.quicv":"","ak.tlsv":"tls1.3","ak.0rtt":"","ak.0rtt.ed":"","ak.csrc":"-","ak.acc":"bbr","ak.t":"1766409084","ak.ak":"hOBiQwZUYzCg5VSAfCLimQ==0K4PIJu6C5mcWwE4rJSZH87EKcAhjLWgW69UtYK9h4TmD0HWXHug5LdpqmOM8r+/WoDTYuXFBNjH3si3dGl/Z9QmqWJ00NHbkCQHTeYjdlRTvse5wtrmHoowXzh97WLvLuJI9IOx8+nbbmcj/8+q9Z0Pp0rb3h8ATbXjDbAu0us6+O6mE8XxB5K/9uShMSXYOemnft0r/lKMls6HNiBiqsKpxi5yypEAmkGMTTv6dXvWoohOqUQbzvuYfHQLn0mk5zZNlvIphmxuuhexc5ejFkzUs7KipP2VaQYnwxBBRZXjp3e18xxou8rZ79dm5jTo//XRMRN3Y30thlrZyXhbz4OmGCDhJugh51WxYQ0PCTXsc2uvuRpDdqePzc9lcsYDdsr3kkbw65hA2zyhQ8AnJrVma3/UJPqAxGEqAVtVsSg=","ak.pv":"1","ak.dpoabenc":"","ak.tf":i};if(""!==t)_["ak.ruds"]=t;var o={i:!1,av:function(e){var t="http.initiator";if(e&&(!e[t]||"spa_hard"===e[t]))_["ak.feo"]=void 0!==a.aFeoApplied?1:0,BOOMR.addVar(_)},rv:function(){var a=["ak.bpcip","ak.cport","ak.cr","ak.csrc","ak.gh","ak.ipv","ak.m","ak.n","ak.ol","ak.proto","ak.quicv","ak.tlsv","ak.0rtt","ak.0rtt.ed","ak.r","ak.acc","ak.t","ak.tf"];BOOMR.removeVar(a)}};BOOMR.plugins.AK={akVars:_,akDNSPreFetchDomain:n,init:function(){if(!o.i){var a=BOOMR.subscribe;a("before_beacon",o.av,null,null),a("onbeacon",o.rv,null,null),o.i=!0}return this},is_complete:function(){return!0}}}}()}(window);</script></head>
<body>
<div id="app"></div>
<script>
if ('serviceWorker' in navigator) {
navigator.serviceWorker.register(
'/sw.js'
);
}
</script>
</body>
</html>