nginx
tcp/443
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1926e27d0926e27d0926e27d0926e27d0926e27d0926e27d0
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1926e27d0926e27d0926e27d0926e27d0926e27d0926e27d0
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html
Open service 43.159.98.32:443 · www.pickerson.top
2026-01-23 01:49
HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html
Vary: Accept-Encoding
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Content-Language: zh-CN
Pragma: no-cache
Expires: 0
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 0
Referrer-Policy: strict-origin-when-cross-origin
set-cookie: XSRF-TOKEN=8ecddfdd-2018-454d-8cf7-30b1b08dc589; Path=/; HTTPOnly
Cache-Control: must-revalidate, no-cache, no-store, max-age=0
Transfer-Encoding: chunked
Connection: close
Date: Fri, 23 Jan 2026 01:49:23 GMT
EO-LOG-UUID: 1070348749073045811
EO-Cache-Status: MISS
NEL: {"success_fraction":0.1,"report_to":"eo-nel","max_age":604800}
Report-To: {"endpoints":[{"url":"https://nel.teo-rum.com/eo-cgi/nel"}],"group":"eo-nel","max_age":604800}
Page title: Picker之家
<!doctype html>
<html lang="zh-CN">
<head>
<meta charset="UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=edge" />
<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=2" />
<title>Picker之家</title>
<link rel="preload" href="/upload/logo.png" as="image" />
<link rel="stylesheet" href="/themes/theme-earth/assets/dist/style.css?v=1.13.1" />
<script>
window.i18nResources = {
"jsModule.colorSchemeSwitcher.dark": `暗色`,
"jsModule.colorSchemeSwitcher.light": `亮色`,
"jsModule.colorSchemeSwitcher.auto": `跟随系统`,
"jsModule.share.qzone": `QQ 空间`,
"jsModule.share.weibo": `微博`,
"jsModule.share.douban": `豆瓣`,
"jsModule.share.wechat": `微信`,
"jsModule.share.native": `系统分享`,
"jsModule.share.windowTitle": `分享`,
"jsModule.upvote.networkError": `网络请求失败,请稍后再试`,
};
</script>
<script src="/themes/theme-earth/assets/dist/main.iife.js?v=1.13.1"></script>
<script>
main.initColorScheme("system",true)
</script>
<meta content="Halo 2.21.9" name="generator"/><!-- PluginSearchWidget start -->
<script src="/plugins/PluginSearchWidget/assets/static/search-widget.iife.js?version=1.7.1" defer></script>
<link rel="stylesheet" href="/plugins/PluginSearchWidget/assets/static/style.css?version=1.7.1" />
<!-- PluginSearchWidget end -->
<link rel="icon" href="/upload/logo.png" />
</head>
<body class="bg-slate-50 dark:bg-slate-900">
<header
id="header-menu"
class="sticky top-0 z-10 flex h-16 bg-white py-3 shadow-sm transition-all dark:bg-gray-800"
x-data="{ open : false }"
>
<div class="mx-auto flex h-full w-full max-w-7xl justify-between px-4 lg:px-6">
<div class="flex h-full items-center gap-6">
<div class="mr-2 h-full">
<a href="/" class="inline-flex h-full items-center">
<img
src="/upload/logo.png"
alt="Logo"
class="h-full w-auto"
/>
</a>
</div>
<ul class="hidden items-center gap-8 sm:flex">
<li
class="relative cursor-pointer text-sm font-medium transition-all"
x-data="dropdown"
@mouseenter="open()"
@mouseleave="close()"
>
<a
class="text-gray-600 hover:text-blue-600 dark:text-slate-50 dark:hover:text-gray-300"
href="/"
>首页</a>
</li>
<li
class="relative cursor-pointer text-sm font-medium transition-all"
x-data="dropdown"
@mouseenter="open()"
@mouseleave="close()"
>
<a
class="text-gray-600 hover:text-blue-600 dark:text-slate-50 dark:hover:text-gray-300"
href="/categories/huawei"
target="_self"
>华为</a>
</li>
<li
class="relative cursor-pointer text-sm font-medium transition-all"
x-data="dropdown"
@mouseenter="open()"
@mouseleave="close()"
>
<a
class="text-gray-600 hover:text-blue-600 dark:text-slate-50 dark:hover:text-gray-300"
href="/tags/HarmonyOS"
>鸿蒙</a>
</li>
<li
class="relative cursor-pointer text-sm font-medium transition-all"
x-data="dropdown"
@mouseenter="open()"
@mouseleave="close()"
>
<a
class="text-gray-600 hover:text-blue-600 dark:text-slate-50 dark:hover:text-gray-300"
href="/about"
>关于</a>
</li>
</ul>
</div>
<div class="flex items-center">
<ul x-data="colorSchemeSwitcher" class="flex items-center gap-4">
<li class="sm:hidden" x-on:click="open = true">
<div class="i-tabler-menu-2 text-lg text-gray-600 hover:text-blue-600 dark:text-slate-100"></div>
</li>
<li
x-data="dropdown"
class="relative cursor-pointer transition-all"
@mouseenter="open()"