Home / Netdisk and pan
槿南盘
pan.jinnan.top/Public instancenetdisk-pan/pan-jinnan-topJSONcomparereport an errorprovider JSON
- Free allowance
- Anonymous guest read of 6 root entries; no account and no payment
- Verdict
- caveatusable, with a named limit or an unprobed read path
- Cost
- free tier
- Identity
- anonymousno card, no phone
- Binding limit
- write-gatedPUT denied at the guest role
- Evidence
- measured3 sources; a live request was made and its output kept
- Freshness
- stale on 2026-11-13checked 2026-10-22 (live); stale on 2026-11-13
| Free tier | anonymous guest read of 6 root entries; no account and no payment unit unlimited; metered on none |
|---|
| Price | none stated |
|---|
| Limits | - write-gated (binding) PUT denied at the guest role
|
|---|
| Identity | anonymous not published |
|---|
| Egress | served through cloudflare; the reader pays nothing |
|---|
| Interface | rest, webdav rest |
|---|
| Composes with | a fetch substrate: point a cache and two mirrors at it, never a write tier Read-only despite the directory name. The guest-upload folder is the single clearest example of the gap between an instance's intent and what it actually permits |
|---|
| Reliability | The cleanest illustration of the write-flag lie: its root listing contains a directory named 05 游客上传, every mount advertises write:true, and every PUT returns permission denied inside an HTTP 200. The operator intended guest upload and the permission never reached the guest role. |
|---|
| Parsed numbers | |
|---|
Evidence 3
| date | source | what it proved |
|---|
| 2026-10-22 | probe: https://pan.jinnan.top/api/public/settings | HTTP 200, JSON carrying a code field, site_title '槿南盘' |
| 2026-10-22 | probe: https://pan.jinnan.top/api/fs/list | anonymous POST /api/fs/list on / returned code 200 with 6 root entries; write:true, write_content_bypass:False, provider:unknown |
| 2026-10-22 | probe: https://pan.jinnan.top/api/fs/put | the zero-byte oracle (PUT at an existing directory with Overwrite:false) returned code 403 with message 'permission denied' inside HTTP 200, so the write permission failed and nothing was written |
More fields 14
| access mode | public-instance |
|---|
| read capability | full |
|---|
| write capability | permission-denied |
|---|
| upstream provider | unknown |
|---|
| fronting cdn | cloudflare |
|---|
| advertised write flag | yes |
|---|
| write content bypass | no |
|---|
| permission bitmask | 0 |
|---|
| base path | / |
|---|
| listing sha256 | dd9a52fe |
|---|
| first seen | 2024-01-20 |
|---|
| last verified alive | 2026-10-22T03:37:00.574Z |
|---|
| consecutive failures | 0 |
|---|
| aliases | ["槿南盘 (pan.jinnan.top) — public OpenList with a literal '05 游客上传' guest-upload directory"] |
|---|