Re: [Full-disclosure] In ur server-status

2007-07-23 Thread Tonu Samuel
On Sat, 2007-07-21 at 22:53 -0500, Todd Troxell wrote: > Noticing lots of admins tend to forget about /server-status, I typed at > random: > I am sure there are ten billion others. In some cases this is worse than > someone grabbing your access log. > http://www.google.com/search?hl=en&client=

Re: [Full-disclosure] In ur server-status

2007-07-23 Thread Alessandro Fiorenzi
Well I find is more serious to find /server-info availabable on one of thats, you could rebuild some important information on the apache configuration, modules, directives, etc.. Alessandro Fiorenzi On Sat, 2007-07-21 at 22:53 -0500, Todd Troxell wrote: > Noticing lots of admins tend to forget

Re: [Full-disclosure] In ur server-status

2007-07-22 Thread [EMAIL PROTECTED]
WOW! 2007/7/22, John Kinsella <[EMAIL PROTECTED]>: > also fun is /server-info... > > On Sat, Jul 21, 2007 at 10:53:42PM -0500, Todd Troxell wrote: > > Noticing lots of admins tend to forget about /server-status, I typed at > > random: > > > > http://www.cnn.com/server-status > > http://www.websho

Re: [Full-disclosure] In ur server-status

2007-07-21 Thread John Kinsella
also fun is /server-info... On Sat, Jul 21, 2007 at 10:53:42PM -0500, Todd Troxell wrote: > Noticing lots of admins tend to forget about /server-status, I typed at > random: > > http://www.cnn.com/server-status > http://www.webshots.com/server-status > http://www.download.com/server-status > htt

Re: [Full-disclosure] In ur server-status

2007-07-21 Thread silky
wow. coolest thing ever. can't blame people. apache don't even disable it. http://www.apache.org/server-status nice find! On 7/22/07, Todd Troxell <[EMAIL PROTECTED]> wrote: > Noticing lots of admins tend to forget about /server-status, I typed at > random: > > http://www.cnn.com/server-sta

[Full-disclosure] In ur server-status

2007-07-21 Thread Todd Troxell
Noticing lots of admins tend to forget about /server-status, I typed at random: http://www.cnn.com/server-status http://www.webshots.com/server-status http://www.download.com/server-status http://slashdot.org/server-status I am sure there are ten billion others. In some cases this is worse than