nginx
tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4bdf766e44bf34033e729812e4ee60b489bb4dd2e8
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /api/auth/wxOAuthEntry
GET /api/bo/general/role/list
GET /api/bo/groupmsgMoments/CircleOfFriend/createCircleFriendReportApi
GET /api/bo/groupmsgMoments/CircleOfFriend/department/tree
GET /api/bo/groupmsgMoments/CircleOfFriend/job/detail
GET /api/bo/groupmsgMoments/CircleOfFriend/job/revoke
GET /api/bo/groupmsgMoments/CircleOfFriend/sendCircleFriendReportApi
GET /api/bo/groupmsgMoments/groupBlacklist/delete/{id}
GET /api/bo/groupmsgMoments/groupBlacklist/detail/{id}
GET /api/bo/groupmsgMoments/groupmsg/createGroupMsgReportApi
GET /api/bo/groupmsgMoments/groupmsg/delete/{groupmsgId}
GET /api/bo/groupmsgMoments/groupmsg/department/treeByGroupmsg/{groupmsgId}
GET /api/bo/groupmsgMoments/groupmsg/detail/{groupmsgId}
GET /api/bo/groupmsgMoments/groupmsg/exportMappingResult/{groupmsgId}
GET /api/bo/groupmsgMoments/groupmsg/getCustomerMappingResult/{groupmsgId}
GET /api/bo/groupmsgMoments/groupmsg/getWecomTemplateMsgExist
GET /api/bo/groupmsgMoments/groupmsg/getWecomTemplateMsgFile
GET /api/bo/groupmsgMoments/groupmsg/importWecomTemplateWithFileName
GET /api/bo/groupmsgMoments/groupmsg/revoke/{groupmsgId}
GET /api/bo/groupmsgMoments/groupmsg/sendGroupMsgReportApi
GET /api/bo/groupmsgMoments/report/deleteGroupMsgReportTask
GET /api/bo/groupmsgMoments/report/downloadReport/{reportId}
GET /api/bo/groupmsgMoments/report/sendReport/{reportId}
GET /api/bo/groupmsgMoments/saTestWhitelist/delete/{id}
GET /api/bo/user/delete/{wwId}
GET /api/bo/user/info
GET /api/bo/user/logout
GET /api/debug/auth/login
GET /api/debug/auth/qr/login/{userId}
GET /api/qrauth/entry
GET /api/qrauth/isOpen
GET /api/sso/redirect
GET /api/wechat/getAgentJsapiInfo
GET /api/wechat/getGroupmsg/{id}
GET /api/wechat/getJsapiInfo
GET /api/wechat/info
GET /healthCheck
POST /api/bo/general/uploadFileListToCoverImage
POST /api/bo/general/uploadFileToCoverImage
POST /api/bo/general/uploadLookFile
POST /api/bo/general/uploadLookFiles
POST /api/bo/general/uploadfile
POST /api/bo/general/uploadfiles
POST /api/bo/groupmsgMoments/CircleOfFriend/department/sync
POST /api/bo/groupmsgMoments/CircleOfFriend/job/add
POST /api/bo/groupmsgMoments/CircleOfFriend/job/delete
POST /api/bo/groupmsgMoments/CircleOfFriend/job/list
POST /api/bo/groupmsgMoments/CircleOfFriend/job/notice
POST /api/bo/groupmsgMoments/CircleOfFriend/job/update
POST /api/bo/groupmsgMoments/groupBlacklist/import
POST /api/bo/groupmsgMoments/groupBlacklist/list
POST /api/bo/groupmsgMoments/groupBlacklist/save
POST /api/bo/groupmsgMoments/groupmsg/edit
POST /api/bo/groupmsgMoments/groupmsg/filterCa
POST /api/bo/groupmsgMoments/groupmsg/insert
POST /api/bo/groupmsgMoments/groupmsg/list
POST /api/bo/groupmsgMoments/groupmsg/setRemindNotification
POST /api/bo/groupmsgMoments/report/list
POST /api/bo/groupmsgMoments/report/receiveUser/delete
POST /api/bo/groupmsgMoments/report/receiveUser/list
POST /api/bo/groupmsgMoments/report/receiveUser/save
POST /api/bo/groupmsgMoments/saTestWhitelist/insertBatch
POST /api/bo/groupmsgMoments/saTestWhitelist/list
POST /api/bo/groupmsgMoments/saTestWhitelist/page
POST /api/bo/groupmsgMoments/saTestWhitelist/save
POST /api/bo/user/add
POST /api/bo/user/detail/{wwid}
POST /api/bo/user/edit
POST /api/bo/user/list
POST /api/qrauth/login
POST /api/sso/login
POST /api/wechat/sendGroupMsg
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4bdf766e44bf34033eb3e6b683e2c39676ab483e2e
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /api/auth/wxOAuthEntry
GET /api/bo/general/role/list
GET /api/bo/groupmsgMoments/CircleOfFriend/department/tree
GET /api/bo/groupmsgMoments/CircleOfFriend/job/detail
GET /api/bo/groupmsgMoments/CircleOfFriend/job/revoke
GET /api/bo/groupmsgMoments/CircleOfFriend/sendCircleFriendReportApi
GET /api/bo/groupmsgMoments/groupBlacklist/delete/{id}
GET /api/bo/groupmsgMoments/groupBlacklist/detail/{id}
GET /api/bo/groupmsgMoments/groupmsg/createGroupMsgReportApi
GET /api/bo/groupmsgMoments/groupmsg/delete/{groupmsgId}
GET /api/bo/groupmsgMoments/groupmsg/department/treeByGroupmsg/{groupmsgId}
GET /api/bo/groupmsgMoments/groupmsg/detail/{groupmsgId}
GET /api/bo/groupmsgMoments/groupmsg/exportMappingResult/{groupmsgId}
GET /api/bo/groupmsgMoments/groupmsg/getCustomerMappingResult/{groupmsgId}
GET /api/bo/groupmsgMoments/groupmsg/getWecomTemplateMsgExist
GET /api/bo/groupmsgMoments/groupmsg/getWecomTemplateMsgFile
GET /api/bo/groupmsgMoments/groupmsg/importWecomTemplateWithFileName
GET /api/bo/groupmsgMoments/groupmsg/revoke/{groupmsgId}
GET /api/bo/groupmsgMoments/groupmsg/sendGroupMsgReportApi
GET /api/bo/groupmsgMoments/report/deleteGroupMsgReportTask
GET /api/bo/groupmsgMoments/report/downloadReport/{reportId}
GET /api/bo/groupmsgMoments/report/sendReport/{reportId}
GET /api/bo/user/delete/{wwId}
GET /api/bo/user/info
GET /api/bo/user/logout
GET /api/debug/auth/login
GET /api/debug/auth/qr/login/{userId}
GET /api/qrauth/entry
GET /api/qrauth/isOpen
GET /api/sso/redirect
GET /api/wechat/getAgentJsapiInfo
GET /api/wechat/getGroupmsg/{id}
GET /api/wechat/getJsapiInfo
GET /api/wechat/info
GET /healthCheck
POST /api/bo/general/uploadFileListToCoverImage
POST /api/bo/general/uploadFileToCoverImage
POST /api/bo/general/uploadLookFile
POST /api/bo/general/uploadLookFiles
POST /api/bo/general/uploadfile
POST /api/bo/general/uploadfiles
POST /api/bo/groupmsgMoments/CircleOfFriend/department/sync
POST /api/bo/groupmsgMoments/CircleOfFriend/job/add
POST /api/bo/groupmsgMoments/CircleOfFriend/job/delete
POST /api/bo/groupmsgMoments/CircleOfFriend/job/list
POST /api/bo/groupmsgMoments/CircleOfFriend/job/notice
POST /api/bo/groupmsgMoments/CircleOfFriend/job/update
POST /api/bo/groupmsgMoments/groupBlacklist/list
POST /api/bo/groupmsgMoments/groupBlacklist/save
POST /api/bo/groupmsgMoments/groupmsg/edit
POST /api/bo/groupmsgMoments/groupmsg/filterCa
POST /api/bo/groupmsgMoments/groupmsg/insert
POST /api/bo/groupmsgMoments/groupmsg/list
POST /api/bo/groupmsgMoments/groupmsg/setRemindNotification
POST /api/bo/groupmsgMoments/report/list
POST /api/bo/groupmsgMoments/report/receiveUser/delete
POST /api/bo/groupmsgMoments/report/receiveUser/list
POST /api/bo/groupmsgMoments/report/receiveUser/save
POST /api/bo/user/add
POST /api/bo/user/detail/{wwid}
POST /api/bo/user/edit
POST /api/bo/user/list
POST /api/qrauth/login
POST /api/sso/login
POST /api/wechat/sendGroupMsg
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4bdf766e44bf34033eb3e6b683e2c39676d5298458
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /api/auth/wxOAuthEntry
GET /api/bo/general/role/list
GET /api/bo/groupmsgMoments/CircleOfFriend/department/tree
GET /api/bo/groupmsgMoments/CircleOfFriend/job/detail
GET /api/bo/groupmsgMoments/CircleOfFriend/job/revoke
GET /api/bo/groupmsgMoments/CircleOfFriend/sendCircleFriendReportApi
GET /api/bo/groupmsgMoments/groupBlacklist/delete/{id}
GET /api/bo/groupmsgMoments/groupBlacklist/detail/{id}
GET /api/bo/groupmsgMoments/groupmsg/createGroupMsgReportApi
GET /api/bo/groupmsgMoments/groupmsg/delete/{groupmsgId}
GET /api/bo/groupmsgMoments/groupmsg/department/treeByGroupmsg/{groupmsgId}
GET /api/bo/groupmsgMoments/groupmsg/detail/{groupmsgId}
GET /api/bo/groupmsgMoments/groupmsg/exportMappingResult/{groupmsgId}
GET /api/bo/groupmsgMoments/groupmsg/getCustomerMappingResult/{groupmsgId}
GET /api/bo/groupmsgMoments/groupmsg/getWecomTemplateMsgExist
GET /api/bo/groupmsgMoments/groupmsg/getWecomTemplateMsgFile
GET /api/bo/groupmsgMoments/groupmsg/importWecomTemplateWithFileName
GET /api/bo/groupmsgMoments/groupmsg/revoke/{groupmsgId}
GET /api/bo/groupmsgMoments/groupmsg/sendGroupMsgReportApi
GET /api/bo/groupmsgMoments/report/deleteGroupMsgReportTask
GET /api/bo/groupmsgMoments/report/downloadReport/{reportId}
GET /api/bo/groupmsgMoments/report/sendReport/{reportId}
GET /api/bo/user/delete/{wwId}
GET /api/bo/user/info
GET /api/bo/user/logout
GET /api/debug/auth/login
GET /api/debug/auth/qr/login/{userId}
GET /api/qrauth/entry
GET /api/qrauth/isOpen
GET /api/sso/redirect
GET /api/wechat/getAgentJsapiInfo
GET /api/wechat/getGroupmsg/{id}
GET /api/wechat/getJsapiInfo
GET /api/wechat/info
GET /healthCheck
POST /api/bo/general/uploadLookFile
POST /api/bo/general/uploadLookFiles
POST /api/bo/general/uploadfile
POST /api/bo/general/uploadfiles
POST /api/bo/groupmsgMoments/CircleOfFriend/department/sync
POST /api/bo/groupmsgMoments/CircleOfFriend/job/add
POST /api/bo/groupmsgMoments/CircleOfFriend/job/delete
POST /api/bo/groupmsgMoments/CircleOfFriend/job/list
POST /api/bo/groupmsgMoments/CircleOfFriend/job/notice
POST /api/bo/groupmsgMoments/CircleOfFriend/job/update
POST /api/bo/groupmsgMoments/groupBlacklist/list
POST /api/bo/groupmsgMoments/groupBlacklist/save
POST /api/bo/groupmsgMoments/groupmsg/edit
POST /api/bo/groupmsgMoments/groupmsg/filterCa
POST /api/bo/groupmsgMoments/groupmsg/insert
POST /api/bo/groupmsgMoments/groupmsg/list
POST /api/bo/groupmsgMoments/groupmsg/setRemindNotification
POST /api/bo/groupmsgMoments/report/list
POST /api/bo/groupmsgMoments/report/receiveUser/delete
POST /api/bo/groupmsgMoments/report/receiveUser/list
POST /api/bo/groupmsgMoments/report/receiveUser/save
POST /api/bo/user/add
POST /api/bo/user/detail/{wwid}
POST /api/bo/user/edit
POST /api/bo/user/list
POST /api/qrauth/login
POST /api/sso/login
POST /api/wechat/sendGroupMsg
Open service 138.113.101.25:443 · wecommsg-prp.lvcampaign.com
2026-01-21 15:08
HTTP/1.1 200 OK
Date: Wed, 21 Jan 2026 15:08:48 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
x-via: 1.1 PSygldLON4gy17:14 (Cdn Cache Server V2.0), 1.1 PS-LHR-04P3q238:9 (Cdn Cache Server V2.0)
x-ws-request-id: 6970ebfe_PS-LHR-04P3q238_46295-3676
Cache-Control: no-store
x-ws-debug-clientip: 139.59.143.102
x-ws-debug-cacheable: 0
x-ws-debug-cachekey: {query=}
x-ws-debug-cachestatus: MISS
{"code":"5555","message":"服务器错误","messageEN":"Server unknown error","data":null,"errorData":null,"success":false}
Open service 138.113.101.25:8443 · wecommsg-prp.lvcampaign.com
2026-01-21 15:08
Open service 138.113.101.25:80 · wecommsg-prp.lvcampaign.com
2026-01-21 15:08
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 21 Jan 2026 15:08:44 GMT
Content-Type: text/html
Content-Length: 162
Connection: close
Location: https://wecommsg-prp.lvcampaign.com/
x-via: 1.1 PS-LHR-04sJI43:5 (Cdn Cache Server V2.0)
x-ws-debug-clientip: 142.93.129.190
x-ws-debug-cacheable: 1
x-ws-debug-cachekey: {query=}
x-ws-debug-cachestatus: HIT
x-ws-request-id: 6970ebfc_PS-LHR-04sJI43_48476-4364
Page title: 301 Moved Permanently
<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx</center>
</body>
</html>
Open service 138.113.101.25:443 · wecommsg-prp.lvcampaign.com
2025-12-31 09:37
HTTP/1.1 200 OK
Date: Wed, 31 Dec 2025 09:37:55 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
x-via: 1.1 f158:12 (Cdn Cache Server V2.0), 1.1 PS-LHR-04P3q238:18 (Cdn Cache Server V2.0)
x-ws-request-id: 6954eef2_PS-LHR-04P3q238_43286-28372
Cache-Control: no-store
x-ws-debug-clientip: 46.101.1.225
x-ws-debug-cacheable: 0
x-ws-debug-cachekey: {query=}
x-ws-debug-cachestatus: MISS
{"code":"5555","message":"服务器错误","messageEN":"Server unknown error","data":null,"errorData":null,"success":false}
Open service 138.113.101.25:8443 · wecommsg-prp.lvcampaign.com
2025-12-31 09:37
Open service 138.113.101.25:80 · wecommsg-prp.lvcampaign.com
2025-12-31 09:37
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 31 Dec 2025 09:37:54 GMT
Content-Type: text/html
Content-Length: 162
Connection: close
Location: https://wecommsg-prp.lvcampaign.com/
x-via: 1.1 PS-LHR-04sJI43:19 (Cdn Cache Server V2.0)
x-ws-debug-clientip: 165.227.173.41
x-ws-debug-cacheable: 1
x-ws-debug-cachekey: {query=}
x-ws-debug-cachestatus: HIT
x-ws-request-id: 6954eef2_PS-LHR-04sJI43_42959-31611
Page title: 301 Moved Permanently
<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx</center>
</body>
</html>