nginx 1.27.0
tcp/443 tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1f5e22fb4dad927ce3d59acb08b66f18998697494e8fdf136
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
DELETE /conversations/{c_id}
DELETE /saved-messages/{message_id}
GET /conversations
GET /messages
GET /messages/{message_id}/more-like-this
GET /messages/{message_id}/suggested-questions
GET /meta
GET /parameters
GET /passport
GET /remote-files/{url}
GET /saved-messages
GET /site
GET /system-features
GET /webapp/access-mode
GET /webapp/permission
PATCH /conversations/{c_id}/pin
PATCH /conversations/{c_id}/unpin
POST /audio-to-text
POST /chat-messages
POST /chat-messages/{task_id}/stop
POST /completion-messages
POST /completion-messages/{task_id}/stop
POST /conversations/{c_id}/name
POST /email-code-login
POST /email-code-login/validity
POST /files/upload
POST /forgot-password
POST /forgot-password/resets
POST /forgot-password/validity
POST /login
POST /messages/{message_id}/feedbacks
POST /remote-files/upload
POST /text-to-audio
POST /workflows/run
POST /workflows/tasks/{task_id}/stop
Open service 14.224.156.34:443 · n8n.enlabsoftware.com
2025-12-23 00:48
HTTP/1.1 200 OK
Server: nginx/1.27.0
Date: Tue, 23 Dec 2025 00:48:25 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 1975
Connection: close
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Last-Modified: Fri, 05 Dec 2025 09:36:17 GMT
ETag: W/"7b7-19aedde8f9f"
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000
Page title: n8n.io - Workflow Automation
<!DOCTYPE html>
<html lang="en">
<head>
<script type="module" crossorigin src="/assets/polyfills-CLZ4X0Ad.js"></script>
<meta charset="utf-8" />
<meta http-equiv="X-UA-Compatible" content="IE=edge" />
<meta name="viewport" content="width=device-width,initial-scale=1.0" />
<link rel="icon" href="/favicon.ico" />
<style>@media (prefers-color-scheme: dark) { body { background-color: rgb(45, 46, 46) } }</style>
<script type="text/javascript">
window.BASE_PATH = '/';
window.REST_ENDPOINT = 'rest';
</script>
<script src="/rest/sentry.js"></script>
<script>!function(t,e){var o,n,p,r;e.__SV||(window.posthog=e,e._i=[],e.init=function(i,s,a){function g(t,e){var o=e.split(".");2==o.length&&(t=t[o[0]],e=o[1]),t[e]=function(){t.push([e].concat(Array.prototype.slice.call(arguments,0)))}}(p=t.createElement("script")).type="text/javascript",p.async=!0,p.src=s.api_host+"/static/array.js",(r=t.getElementsByTagName("script")[0]).parentNode.insertBefore(p,r);var u=e;for(void 0!==a?u=e[a]=[]:a="posthog",u.people=u.people||[],u.toString=function(t){var e="posthog";return"posthog"!==a&&(e+="."+a),t||(e+=" (stub)"),e},u.people.toString=function(){return u.toString(1)+".people (stub)"},o="capture identify alias people.set people.set_once set_config register register_once unregister opt_out_capturing has_opted_out_capturing opt_in_capturing reset isFeatureEnabled getFeatureFlag onFeatureFlags reloadFeatureFlags".split(" "),n=0;n<o.length;n++)g(u,o[n]);e._i.push([i,s,a])},e.__SV=1)}(document,window.posthog||[])</script>
<title>n8n.io - Workflow Automation</title>
<script type="module" crossorigin src="/assets/index-BLAboPd2.js"></script>
<link rel="stylesheet" crossorigin href="/assets/index-sq5ggyEC.css">
</head>
<body>
<noscript>
<strong
>We're sorry but the n8n Editor-UI doesn't work properly without JavaScript enabled. Please
enable it to continue.</strong
>
</noscript>
<div id="app"></div>
</body>
</html>
Open service 14.224.156.34:80 · n8n.enlabsoftware.com
2025-12-23 00:48
HTTP/1.1 301 Moved Permanently Server: nginx/1.27.0 Date: Tue, 23 Dec 2025 00:48:24 GMT Content-Type: text/html Content-Length: 169 Connection: close Location: https://n8n.enlabsoftware.com/ Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx/1.27.0</center> </body> </html>