The server-status page (usually /server-status
) allows server administrators to find out how well their server is performing.
This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3170a1e9d170a1e9d18b13d7b4
Apache Status Apache Server Status for www.coolmathfor.fun (via ::1) Server Version: Apache/2.4.56 (Win64) OpenSSL/1.1.1t PHP/8.0.28 Server MPM: WinNT Apache Lounge VS16 Server built: Mar 7 2023 13:21:03 Current Time: Friday, 21-Apr-2023 21:51:30 Central America Standard Time Restart Time: Friday, 21-Apr-2023 20:51:14 Central America Standard Time Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 1 hour 16 seconds Server load: -1.00 -1.00 -1.00 Total accesses: 1455 - Total Traffic: 149.6 MB - Total Duration: 27443 .402 requests/sec - 42.4 kB/second - 105.3 kB/request - 18.8612 ms/request 2 requests currently being processed, 148 idle workers ________________________________________________________________ ________________________________________________________________ _________________W___W Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMSSReqDurConnChildSlotClientProtocolVHostRequest 0-0242920/93/93_ 0040000.018.3618.36 ::1http/1.1localhost:80GET /config.json HTTP/1.1 0-0242920/323/323_ 0039250.027.3527.35 ::1http/1.1 0-0242922/312/312W 0033990.318.7618.76 ::1http/1.1localhost:80GET /server-status HTTP/1.1 0-0242920/81/81_ 0064580.037.3437.34 ::1http/1.1localhost:80GET /login.action HTTP/1.1 0-0242920/171/171_ 01033360.014.6414.64 ::1http/1.1 0-0242920/334/334_ 0035460.023.2123.21 ::1http/1.1localhost:80GET /v2/_catalog HTTP/1.1 0-0242923/142/142K 0027760.99.969.96 ::1http/1.1localhost:80GET /telescope/requests HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 0subcaches: 32, indexes per subcache: 88index usage: 0%, cache usage: 0%total entries stored since starting: 0total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 0 misstotal removes since starting: 0 hit, 0 miss Apache/2.4.56 (Win64) OpenSSL/1.1.1t PHP/8.0.28 Server at www.coolmathfor.fun Port 80
The server-status page (usually /server-status
) allows server administrators to find out how well their server is performing.
This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3170a1e9d170a1e9d15a56375a
Apache Status Apache Server Status for www.coolmathfor.fun (via ::1) Server Version: Apache/2.4.56 (Win64) OpenSSL/1.1.1t PHP/8.0.28 Server MPM: WinNT Apache Lounge VS16 Server built: Mar 7 2023 13:21:03 Current Time: Friday, 21-Apr-2023 21:51:30 Central America Standard Time Restart Time: Friday, 21-Apr-2023 20:51:14 Central America Standard Time Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 1 hour 16 seconds Server load: -1.00 -1.00 -1.00 Total accesses: 1445 - Total Traffic: 149.6 MB - Total Duration: 27353 .4 requests/sec - 42.4 kB/second - 106.0 kB/request - 18.9294 ms/request 3 requests currently being processed, 147 idle workers ________________________________________________________________ ________________________________________________________________ _______________W__K_K_ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMSSReqDurConnChildSlotClientProtocolVHostRequest 0-0242920/91/91W 0039190.018.3618.36 ::1http/1.1localhost:80GET /server-status HTTP/1.1 0-0242920/323/323_ 0039250.027.3527.35 ::1http/1.1 0-0242920/310/310_ 0133960.018.7618.76 ::1http/1.1localhost:80GET /s/53e27383e2632313e2930323/_/;/META-INF/maven/com.atlassia 0-0242924/80/80K 0064571.237.3437.34 ::1http/1.1localhost:80GET /debug/default/view?panel=config HTTP/1.1 0-0242920/171/171_ 01033360.014.6414.64 ::1http/1.1 0-0242921/331/331K 0135430.323.2023.20 ::1http/1.1localhost:80GET /.env HTTP/1.1 0-0242920/139/139_ 0127730.09.969.96 ::1http/1.1localhost:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 0subcaches: 32, indexes per subcache: 88index usage: 0%, cache usage: 0%total entries stored since starting: 0total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 0 misstotal removes since starting: 0 hit, 0 miss Apache/2.4.56 (Win64) OpenSSL/1.1.1t PHP/8.0.28 Server at www.coolmathfor.fun Port 80