The server-status page (usually /server-status
) allows server administrators to find out how well their server is performing.
This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d2e5108cd2e5108cff931e60
Apache Status Apache Server Status for 94.141.130.80 (via 192.168.40.59) Server Version: Apache/2.4.23 (Win32) OpenSSL/1.0.2h PHP/5.5.38 Server MPM: WinNT Apache Lounge VC11 Server built: Jul 7 2016 11:13:22 Current Time: Friday, 10-Jun-2022 01:48:19 ?rodkowoeuropejski czas letni Restart Time: Tuesday, 07-Jun-2022 09:45:35 ?rodkowoeuropejski czas letni Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 2 days 16 hours 2 minutes 43 seconds Server load: -1.00 -1.00 -1.00 Total accesses: 5704 - Total Traffic: 3.6 MB .0247 requests/sec - 16 B/second - 667 B/request 2 requests currently being processed, 148 idle workers ________________________________________________________________ ________________________________________________________________ _________________W__W_ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMSSReqConnChildSlotClientProtocolVHostRequest 0-097040/689/689_ 23822212790.00.440.44 192.168.40.15http/1.1localhost:80POST /class/content2.php HTTP/1.1 0-097040/354/354_ 23826215920.00.220.22 192.168.40.15http/1.1localhost:80POST /class/content2.php HTTP/1.1 0-097040/1492/1492W 1400.00.950.95 192.168.40.15http/1.1localhost:80POST /class/content2.php HTTP/1.1 0-097040/1146/1146_ 1845219350.00.730.73 192.168.40.15http/1.1localhost:80POST /class/content2.php HTTP/1.1 0-097040/1536/1536_ 23834219040.00.970.97 127.0.0.1http/1.1localhost:80GET /save_trends.php HTTP/1.0 0-097040/465/465W 000.00.310.31 192.168.40.15http/1.1localhost:80GET /server-status HTTP/1.1 0-097040/22/22_ 229266230110.00.010.01 127.0.0.1http/1.1localhost:80GET /save_trends.php HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 0subcaches: 32, indexes per subcache: 88index usage: 0%, cache usage: 0%total entries stored since starting: 0total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 0 misstotal removes since starting: 0 hit, 0 miss Apache/2.4.23 (Win32) OpenSSL/1.0.2h PHP/5.5.38 Server at 94.141.130.80 Port 89
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d2e5108cd2e5108c750e3292
Apache Status Apache Server Status for 94.141.130.80 (via 192.168.40.59) Server Version: Apache/2.4.23 (Win32) OpenSSL/1.0.2h PHP/5.5.38 Server MPM: WinNT Apache Lounge VC11 Server built: Jul 7 2016 11:13:22 Current Time: Saturday, 28-May-2022 21:57:48 ?rodkowoeuropejski czas letni Restart Time: Monday, 23-May-2022 07:32:23 ?rodkowoeuropejski czas letni Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 5 days 14 hours 25 minutes 25 seconds Server load: -1.00 -1.00 -1.00 Total accesses: 34706 - Total Traffic: 20.5 MB .0717 requests/sec - 44 B/second - 618 B/request 3 requests currently being processed, 147 idle workers ________________________________________________________________ ________________________________________________________________ _______________W__W__W Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMSSReqConnChildSlotClientProtocolVHostRequest 0-089760/4721/4721_ 57705216230.02.772.77 127.0.0.1http/1.1localhost:80GET /save_trends.php HTTP/1.0 0-089760/3437/3437_ 5730212170.01.981.98 192.168.40.15http/1.1localhost:80POST /class/content2.php HTTP/1.1 0-089760/1067/1067W 1000.00.690.69 192.168.40.15http/1.1localhost:80POST /class/content2.php HTTP/1.1 0-089760/1/1_ 482737219820.00.000.00 127.0.0.1http/1.1localhost:80GET /save_trends.php HTTP/1.0 0-089760/5252/5252_ 5735214000.03.013.01 192.168.40.15http/1.1localhost:80POST /class/content2.php HTTP/1.1 0-089760/5113/5113W 000.03.123.12 192.168.40.15http/1.1localhost:80GET /server-status HTTP/1.1 0-089760/4699/4699_ 139785216760.02.712.71 127.0.0.1http/1.1localhost:80GET /save_trends.php HTTP/1.0 0-089760/3595/3595_ 5768217480.02.152.15 127.0.0.1http/1.1localhost:80GET /save_trends.php HTTP/1.0 0-089760/6821/6821W 000.04.034.03 192.168.40.15http/1.1localhost:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 0subcaches: 32, indexes per subcache: 88index usage: 0%, cache usage: 0%total entries stored since starting: 0total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 0 misstotal removes since starting: 0 hit, 0 miss Apache/2.4.23 (Win32) OpenSSL/1.0.2h PHP/5.5.38 Server at 94.141.130.80 Port 89