The server-status page (usually /server-status) allows server administrators to find out how well their server is performing.
This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318c31feb48c31feb4bdcc9779
Apache Status Apache Server Status for appstorex.ml (via 127.0.0.1) Server Version: Apache/2.4.38 (Debian) Server MPM: prefork Server Built: 2022-06-20T19:03:00 Current Time: Saturday, 03-Dec-2022 02:59:25 PST Restart Time: Friday, 02-Dec-2022 18:43:10 PST Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 8 hours 16 minutes 14 seconds Server load: 0.07 0.07 0.06 Total accesses: 606 - Total Traffic: 1.4 MB - Total Duration: 1235 CPU Usage: u.27 s.68 cu.24 cs.32 - .00507% CPU load .0204 requests/sec - 49 B/second - 2426 B/request - 2.03795 ms/request 6 requests currently being processed, 5 idle workers __W._KK.KK._K.._................................................ ................................................................ ...................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0182210/0/40_ 0.00001200.00.000.16 ::1http/1.1::1:81OPTIONS * HTTP/1.0 1-0180240/3/29_ 0.0080750.00.000.07 127.0.0.1http/1.1::1:81GET /static../.git/config HTTP/1.1 2-0180157/14/34W 0.00007211.10.020.09 127.0.0.1http/1.1::1:81GET /server-status HTTP/1.1 3-0-0/0/56. 0.002201000.00.000.11 ::1http/1.1::1:81OPTIONS * HTTP/1.0 4-0180160/15/51_ 0.0022860.00.020.10 127.0.0.1http/1.1::1:81GET / HTTP/1.1 5-0180177/17/29K 0.00003315.10.030.06 127.0.0.1http/1.1::1:81GET / HTTP/1.1 6-0181906/7/47K 0.00008810.20.010.12 127.0.0.1http/1.1::1:81GET /.git/config HTTP/1.1 7-0-0/0/40. 0.002601280.00.000.10 ::1http/1.1::1:81OPTIONS * HTTP/1.0 8-0181924/5/55K 0.00001613.10.000.14 127.0.0.1http/1.1::1:81PUT /api/v2/cmdb/system/admin/admin HTTP/1.1 9-059708/39/39K 0.0200698.70.070.07 127.0.0.1http/1.1::1:81GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 10-0-0/0/43. 0.00210770.00.000.09 ::1http/1.1::1:81OPTIONS * HTTP/1.0 11-059730/45/45_ 0.0240610.00.090.09 127.0.0.1http/1.1::1:81GET /.git/config HTTP/1.1 12-0181933/3/6K 0.000027.90.010.01 127.0.0.1http/1.1::1:81GET /?rest_route=/wp/v2/users/ HTTP/1.1 13-0-0/0/7. 0.0023090.00.000.01 ::1http/1.1::1:81OPTIONS * HTTP/1.0 14-0-0/0/30. 0.00250660.00.000.06 ::1http/1.1::1:81OPTIONS * HTTP/1.0 15-059770/44/44_ 0.0270800.00.130.13 127.0.0.1http/1.1::1:81GET /.htaccess HTTP/1.1 16-0-0/0/4. 0.0024000.00.000.00 ::1http/1.1::1:81OPTIONS * HTTP/1.0 17-0-0/0/1. 0.0016617000.00.000.00 ::1http/1.1::1:81OPTIONS * HTTP/1.0 18-0-0/0/1. 0.0016615000.00.000.00 ::1http/1.1::1:81OPTIONS * HTTP/1.0 19-0-0/0/1. 0.0016614000.00.000.00 ::1http/1.1::1:81OPTIONS * HTTP/1.0 20-0-0/0/1. 0.0016618000.00.000.00 ::1http/1.1::1:81OPTIONS * HTTP/1.0 21-0-0/0/1. 0.0016612000.00.000.00 ::1http/1.1::1:81OPTIONS * HTTP/1.0 22-0-0/0/1. 0.0016613000.00.000.00 ::1http/1.1::1:81OPTIONS * HTTP/1.0 23-0-0/0/1. 0.0016611000.00.000.00 ::1http/1.1::1:81OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot Apache/2.4.38 (Debian) Server at appstorex.ml Port 80
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318c31feb48c31feb40fff688d
Apache Status Apache Server Status for appstorex.ml (via 127.0.0.1) Server Version: Apache/2.4.38 (Debian) Server MPM: prefork Server Built: 2022-06-20T19:03:00 Current Time: Saturday, 03-Dec-2022 02:59:24 PST Restart Time: Friday, 02-Dec-2022 18:43:10 PST Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 8 hours 16 minutes 13 seconds Server load: 0.07 0.07 0.06 Total accesses: 579 - Total Traffic: 1.4 MB - Total Duration: 1226 CPU Usage: u.27 s.67 cu.24 cs.32 - .00504% CPU load .0194 requests/sec - 48 B/second - 2479 B/request - 2.11744 ms/request 4 requests currently being processed, 6 idle workers ._K._WK._K.__.._................................................ ................................................................ ...................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0-0/0/40. 0.001901200.00.000.16 ::1http/1.1::1:81OPTIONS * HTTP/1.0 1-0180240/3/29_ 0.0070750.00.000.07 127.0.0.1http/1.1::1:81GET /static../.git/config HTTP/1.1 2-0180154/11/31K 0.0000719.00.020.09 127.0.0.1http/1.1::1:81PUT /api/v2/cmdb/system/admin/admin HTTP/1.1 3-0-0/0/56. 0.002101000.00.000.11 ::1http/1.1::1:81OPTIONS * HTTP/1.0 4-0180160/15/51_ 0.0012860.00.020.10 127.0.0.1http/1.1::1:81GET / HTTP/1.1 5-0180171/11/23W 0.0000293.50.020.04 127.0.0.1http/1.1::1:81GET /server-status HTTP/1.1 6-0181902/3/43K 0.0000887.20.010.12 127.0.0.1http/1.1::1:81GET /?rest_route=/wp/v2/users/ HTTP/1.1 7-0-0/0/40. 0.002501280.00.000.10 ::1http/1.1::1:81OPTIONS * HTTP/1.0 8-0181920/1/51_ 0.002501600.00.000.13 127.0.0.1http/1.1::1:81GET /login.action HTTP/1.1 9-059702/33/33K 0.0200684.20.070.07 127.0.0.1http/1.1::1:81GET /telescope/requests HTTP/1.1 10-0-0/0/43. 0.00200770.00.000.09 ::1http/1.1::1:81OPTIONS * HTTP/1.0 11-059730/45/45_ 0.0230610.00.090.09 127.0.0.1http/1.1::1:81GET /.git/config HTTP/1.1 12-0181930/0/3_ 0.0022000.00.000.00 127.0.0.1http/1.1 13-0-0/0/7. 0.0022090.00.000.01 ::1http/1.1::1:81OPTIONS * HTTP/1.0 14-0-0/0/30. 0.00240660.00.000.06 ::1http/1.1::1:81OPTIONS * HTTP/1.0 15-059770/44/44_ 0.0250800.00.130.13 127.0.0.1http/1.1::1:81GET /.htaccess HTTP/1.1 16-0-0/0/4. 0.0023000.00.000.00 ::1http/1.1::1:81OPTIONS * HTTP/1.0 17-0-0/0/1. 0.0016615000.00.000.00 ::1http/1.1::1:81OPTIONS * HTTP/1.0 18-0-0/0/1. 0.0016613000.00.000.00 ::1http/1.1::1:81OPTIONS * HTTP/1.0 19-0-0/0/1. 0.0016612000.00.000.00 ::1http/1.1::1:81OPTIONS * HTTP/1.0 20-0-0/0/1. 0.0016616000.00.000.00 ::1http/1.1::1:81OPTIONS * HTTP/1.0 21-0-0/0/1. 0.0016610000.00.000.00 ::1http/1.1::1:81OPTIONS * HTTP/1.0 22-0-0/0/1. 0.0016611000.00.000.00 ::1http/1.1::1:81OPTIONS * HTTP/1.0 23-0-0/0/1. 0.0016609000.00.000.00 ::1http/1.1::1:81OPTIONS * HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot Apache/2.4.38 (Debian) Server at appstorex.ml Port 80