+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Apache Mod_Status Crawler (/showthread.php?tid=5523551)
Apache Mod_Status Crawler - ๖ۣۜCriminal - Jan 14, 2017
You guys think this would still be useful? mod_status is basically a module for apache that allows you to view some settings like how many http requests a second are hitting your server, the backend IP, some other info on the CPU but the most interesting info you can get is all GET requests that get made to the server so if csrf tokens get leaked you can pull them by just going to /server-status, not every site runs it but was thinking of crawling top alexa domains and seeing which ones still are, I'm sure alot of people stopped running it for safety reasons but if people do run it it's good for recon you could also sometimes find admin panels if an admin requests the URL for it you can grep for the word admin.
* - Anne Marie - Jan 14, 2017
Give it a try. Many Sites are still using it.