Skip to content

Latest commit

 

History

History
91 lines (78 loc) · 4.17 KB

README.md

File metadata and controls

91 lines (78 loc) · 4.17 KB

Apache-Status Monitor

Python Script for scraping Apache Server Status page for information gathering.

  • Collect Client IPs and their geolocation.
  • detect fuzzing
  • find urls from requests.
  • find open directories.
  • find internal information.

To-DO

  • Cron job to run script and log IPs
  • Optimize Python Script
  • Write in Pure C
  • Script Metasploit Module
  • improve NSE Script

Apache-Server-Status

The Apache Server-Status module provides an instrumentation tool set to determine how well the Apache server instance is performing. Apache web server exposes metrics through its status module, mod_status. If your server is running and mod_status is enabled, your server’s status page should be available at http://{host}/server-status/. If that link does not work, it means you need to enable mod_status in your configuration file.

Srv - Child Server number - generation
PID -	OS process ID
Acc - Number of accesses this connection / this child / this slot
M - Mode of operation
CPU - CPU usage, number of seconds
SS - Seconds since beginning of most recent request
Req - Milliseconds required to process most recent request
Dur - Sum of milliseconds required to process all requests
Conn - Kilobytes transferred this connection
Child - Megabytes transferred this child
Slot - Total megabytes transferred this slot
  • The number of children serving requests.
  • The number of idle children.
  • The status of each child, the number of requests that child has performed, and the total number of bytes served by the child.
  • The total number of accesses and byte count served.
  • The time the server was started or restarted and the amount of time the server has been running.
  • An average of the number of requests per second, the number of bytes served per second, and the average number of bytes per request.
  • The current percentage of the CPU used by each child and in total by Apache.
  • The current hosts and requests being processed.

How to find Servers with Apache Status Enabled

There is always our good Ol' Google Dorking to find hosts with mod_status enabled. Status page title is <title>Apache Status</title> and the url contains /server-status/. that is more than enough to be put within google search operators like intitle:, inurl: .etc and find such servers.

IP Geolocation API

Apache Status Monitor Script uses Free ip-api.com IP Geoplocation API. Each client IP scraped from the server-status page are recorded in a local file. Free API endpoints are limited to 45 HTTP requests per minute from an IP address. If you go over this limit requests are throttled (HTTP 429) until your limit window is reset. you can always get the paid - pro version to support them.

{
  "status": "success",
  "country": "United States",
  "countryCode": "US",
  "region": "VA",
  "regionName": "Virginia",
  "city": "Ashburn",
  "zip": "20149","lat": 39.03,
  "lon": -77.5",
  "timezone": "America/New_York",
  "isp": "Google LLC",
  "org": "Google Public DNS",
  "as": "AS15169 Google LLC","query": "8.8.8.8"
}

you can customize returned fields by passing GET parameter.you can add or avoid certain fields.

http://ip-api.com/json/{query}?fields=status,message,continent,continentCode,country,countryCode,region,regionName,city,district,zip,lat,lon,timezone,offset,currency,isp,org,as,asname,reverse,mobile,proxy,hosting,query

will give maximum number of fields.

Useful Links