The server-status page (usually /server-status) allows server administrators to find out how well their server is performing.
This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31137a33bc137a33bc49d526d8
Apache Status Apache Server Status for contentdev.cote.co.uk (via 127.0.0.1) Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f Server MPM: event Server Built: 2023-03-08T17:32:54 Current Time: Thursday, 20-Jul-2023 19:46:50 UTC Restart Time: Thursday, 20-Jul-2023 19:31:01 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 15 minutes 49 seconds Server load: 0.00 0.02 0.09 Total accesses: 16 - Total Traffic: 17 kB - Total Duration: 3 CPU Usage: u.01 s.02 cu0 cs0 - .00316% CPU load .0169 requests/sec - 18 B/second - 1088 B/request - .1875 ms/request 1 requests currently being processed, 49 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 0381742no0yes025000 1381743no1yes124000 Sum201 149000 ________________________________________________W_.............. ................................................................ ...................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-03817420/1/1_ 0.000000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8083GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-03817420/1/1_ 0.000000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8083GET /v2/_catalog HTTP/1.1 0-03817420/1/1_ 0.000000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8083GET /about HTTP/1.1 0-03817420/1/1_ 0.00153000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8083GET / HTTP/1.1 0-03817420/1/1_ 0.00152000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8083GET /favicon.ico HTTP/1.1 0-03817420/1/1_ 0.0015000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8082HEAD / HTTP/1.1 0-03817420/1/1_ 0.006000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8082HEAD / HTTP/1.1 1-03817430/1/1_ 0.001000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8082GET / HTTP/1.1 1-03817430/1/1_ 0.0089000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8083GET / HTTP/1.1 1-03817430/1/1_ 0.0016000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8083HEAD / HTTP/1.1 1-03817430/1/1_ 0.0014000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8082HEAD / HTTP/1.1 1-03817430/1/1_ 0.001000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8083GET / HTTP/1.1 1-03817430/1/1_ 0.001000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8083GET / HTTP/1.1 1-03817430/1/1_ 0.000000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8083GET /.vscode/sftp.json HTTP/1.1 1-03817430/1/1_ 0.000000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8083GET /debug/default/view?panel=config HTTP/1.1 1-03817430/1/1_ 0.000000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8082GET /.git/config HTTP/1.1 1-03817431/0/0W 0.000000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8083GET /server-status HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 0subcaches: 32, indexes per subcache: 88index usage: 0%, cache usage: 0%total entries stored since starting: 0total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 0 misstotal removes since starting: 0 hit, 0 miss Apache/2.4.41 (Ubuntu) Server at contentdev.cote.co.uk Port 80
The server-status page (usually /server-status) allows server administrators to find out how well their server is performing.
This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31137a33bc137a33bc724985f4
Apache Status Apache Server Status for contentdev.cote.co.uk (via 127.0.0.1) Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f Server MPM: event Server Built: 2023-03-08T17:32:54 Current Time: Thursday, 20-Jul-2023 19:46:52 UTC Restart Time: Thursday, 20-Jul-2023 19:31:01 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 15 minutes 51 seconds Server load: 0.00 0.02 0.09 Total accesses: 32 - Total Traffic: 36 kB - Total Duration: 6 CPU Usage: u.01 s.02 cu0 cs0 - .00315% CPU load .0336 requests/sec - 38 B/second - 1152 B/request - .1875 ms/request 1 requests currently being processed, 49 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 0381742no0yes025000 1381743no1yes124000 Sum201 149000 ___________________________________________W______.............. ................................................................ ...................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-03817420/1/1_ 0.000000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8083GET /config.json HTTP/1.1 0-03817420/1/1_ 0.001000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8082GET /.vscode/sftp.json HTTP/1.1 0-03817420/1/1_ 0.001000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8083GET /.env HTTP/1.1 0-03817420/1/1_ 0.001000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8082GET / HTTP/1.1 0-03817420/1/1_ 0.000000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8082GET /debug/default/view?panel=config HTTP/1.1 0-03817420/1/1_ 0.000000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8082GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-03817420/1/1_ 0.002000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8083GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-03817420/1/1_ 0.002000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8083GET /v2/_catalog HTTP/1.1 0-03817420/1/1_ 0.002000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8083GET /about HTTP/1.1 0-03817420/1/1_ 0.00155000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8083GET / HTTP/1.1 0-03817420/1/1_ 0.00154000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8083GET /favicon.ico HTTP/1.1 0-03817420/1/1_ 0.0017000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8082HEAD / HTTP/1.1 0-03817420/1/1_ 0.008000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8082HEAD / HTTP/1.1 1-03817430/1/1_ 0.001000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8083GET /.DS_Store HTTP/1.1 1-03817430/1/1_ 0.001000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8083GET /_all_dbs HTTP/1.1 1-03817430/1/1_ 0.001000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8083GET /login.action HTTP/1.1 1-03817430/2/2_ 0.000000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8083GET /telescope/requests HTTP/1.1 1-03817430/1/1_ 0.001000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8083GET / HTTP/1.1 1-03817430/1/1_ 0.001000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8083GET /.git/config HTTP/1.1 1-03817430/2/2_ 0.001000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8082GET /about HTTP/1.1 1-03817430/1/1_ 0.001000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8082HEAD / HTTP/1.1 1-03817430/1/1_ 0.000000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8083GET /s/634313e28363e27373e20323/_/;/META-INF/maven/com.atlassia 1-03817430/2/2_ 0.000000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8082GET /v2/_catalog HTTP/1.1 1-03817430/2/2_ 0.000000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8083GET /?rest_route=/wp/v2/users/ HTTP/1.1 1-03817431/1/1W 0.000000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8082GET /server-status HTTP/1.1 1-03817430/1/1_ 0.002000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8083GET /debug/default/view?panel=config HTTP/1.1 1-03817430/1/1_ 0.002000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8082GET /.git/config HTTP/1.1 1-03817430/1/1_ 0.002000.00.000.00 127.0.0.1http/1.1contentdev.cote.co.uk:8083GET /server-status HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 0subcaches: 32, indexes per subcache: 88index usage: 0%, cache usage: 0%total entries stored since starting: 0total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 0 misstotal removes since starting: 0 hit, 0 miss Apache/2.4.41 (Ubuntu) Server at contentdev.cote.co.uk Port 443