find an unknown URL
Page 1 of 2 12 LastLast
Results 1 to 10 of 15

Thread: find an unknown URL

  1. #1
    Priapistic Monk KorpDeath's Avatar
    Join Date
    Dec 2001
    Posts
    2,628

    find an unknown URL

    Okay I have a problem and I have used every trick in the book, keep in mind I'm no Apache guru but I do know enough.

    The situation:
    I have to make changes to the configuration of a database and now I can't restart the service. I believe the admin uses phppgadmin to do these types of things since it is installed but I don't know the URL. Is there any tool out there that can just scan port 80 for all URLs on the box. I'm not sure if I'm asking it the right way but I've tried multiple indexing utilities, etc. etc. and they don't work. It's a secure internal site and to make matters worse all the php is encoded and I don't have the source to view nor can I see the config files for just about anything.

    I mean besides rebooting the server.......I've tried just restarting the sql service but no luck.

    Apache
    php
    sql

    Any ideas?
    Mankind have a great aversion to intellectual labor; but even supposing knowledge to be easily attainable, more people would be content to be ignorant than would take even a little trouble to acquire it.
    - Samuel Johnson

  2. #2
    AO Senior Cow-beller
    Moderator
    zencoder's Avatar
    Join Date
    Dec 2004
    Location
    Mountain standard tribe.
    Posts
    1,177
    Is apache a service, in windows? I am assuming windows. since you didn't say but you talk about restarting services.

    httpd.conf should have that info, or at least a place to start, but if you don't have access to the config files, this won't work. Have you looked at the doco for phpPgAdmin to see if it has a default path to use? I've never used it, so I don't know, but I know phpMyAdmin does have a specific place it goes by default if you don't choose otherwise. Can you access the phpPgAdmin conf files?
    "Data is not necessarily information. Information does not necessarily lead to knowledge. And knowledge is not always sufficient to discover truth and breed wisdom." --Spaf
    Anyone who is capable of getting themselves made president should on no account be allowed to do the job. --Douglas Adams (1952-2001)
    "...people find it far easier to forgive others for being wrong than being right." - Albus Percival Wulfric Brian Dumbledore

  3. #3
    Socialist Utopia Donkey Punch's Avatar
    Join Date
    Sep 2004
    Location
    In the basement
    Posts
    319
    Korp: This may help you. http://www.samspade.org/d/ipdns.html

    I'll look some more...
    In loving memory of my step daughter 1987-2006

    Liberty In North Korea

  4. #4
    Priapistic Monk KorpDeath's Avatar
    Join Date
    Dec 2001
    Posts
    2,628
    Thank you for your prompt responses.

    Zencoder: the phppgadmin conf files are in php and therefore encoded. And, no, it's linux running apache, sorry should've stated that. I took it for granted because, of course, I knew. As for the httpd.conf it's bare bones, I'm sure all that is done in the encoded PHP, it would figure. This is why I was so stumped. None of the non-encoded files have anything useful in them. Damn coders, present company excepted, of course.

    Donkey Punch: Thanks, I completely forgot about samspade, I'll see if it helps.

    Have any of you tried Extract URL? It's seriously system intensive, while running I got the famous "cannot connect to database because there's too many connections" error on my server. I think it may have what I need now I just need to go through 38 megs of txt to find the exact URL.
    Mankind have a great aversion to intellectual labor; but even supposing knowledge to be easily attainable, more people would be content to be ignorant than would take even a little trouble to acquire it.
    - Samuel Johnson

  5. #5
    Socialist Utopia Donkey Punch's Avatar
    Join Date
    Sep 2004
    Location
    In the basement
    Posts
    319
    I have a quesiton, why are all the scripts encrypted? That makes your job as a maintainer a pain in the ass. Also, the scripts are all server side anyway, does the developer not trust you guys?
    In loving memory of my step daughter 1987-2006

    Liberty In North Korea

  6. #6
    Priapistic Monk KorpDeath's Avatar
    Join Date
    Dec 2001
    Posts
    2,628
    It's a long story.. but to get to the heart of the matter. The developer WAS a full time employee but thinks the source code belongs to him and not the company so he's holding it ransom, so to speak. It's a mess, truly. And yes, it makes my job THAT much harder to do.
    Mankind have a great aversion to intellectual labor; but even supposing knowledge to be easily attainable, more people would be content to be ignorant than would take even a little trouble to acquire it.
    - Samuel Johnson

  7. #7
    Socialist Utopia Donkey Punch's Avatar
    Join Date
    Sep 2004
    Location
    In the basement
    Posts
    319
    Okay, check your httpd.conf, and does it give any indication on where the vhosts are?
    In loving memory of my step daughter 1987-2006

    Liberty In North Korea

  8. #8
    Senior Member
    Join Date
    Oct 2001
    Posts
    786
    I'm not sure what you're trying to do. Find documents on the server to administer it through the web interface? Or are you simply trying to access MySQL so you can change some settings? MySQL configuration can be done through the terminal with "mysql -p username" (to sign in as that user, password prompt provided) and then using SQL queries from there.


    If it is to find these "hidden" directories:

    As Donkey Punch says, check out httpd.conf and look for virtual hosts. It should be marked off like so:

    Code:
    <VirtualHost ipaddy or *>
            DocumentRoot /web/www/html/
            ServerAdmin root@localhost
            ServerName example.com
            ServerAlias www.example.com
            DirectoryIndex index.php index.html index.htm
            <Directory "/web/www/html/">
                    AllowOverride None
            </Directory>
            LogLevel warn
    </VirtualHost>
    Checkout Directory for the folder it is in. Then look at the file names, and try those names with the server name/alias as URLs. (You may need to use another computer, I have the bad luck of the server not responding to itself) Such as example.com/admin.php.

    If there is a hidden file like ".htaccess" inside the directory (file browsing, not via web browser) you should open it and see what is in there. A .htaccess can rewrite URLs so that example.com/ubersecret could be redireted to example.com/hidden/sql/admin.php, etc.


    Good luck.

  9. #9
    AO Senior Cow-beller
    Moderator
    zencoder's Avatar
    Join Date
    Dec 2004
    Location
    Mountain standard tribe.
    Posts
    1,177
    Tim_axe, it's not MySQL, its PostgreSQL. phpPgAdmin is a util a lot like phpMyAdmin, but for postgres.

    I was thinking the same thing...but it also depends on if he has app's or script's that need to be changed as well...sounds like a sticky situation. Best of luck.
    "Data is not necessarily information. Information does not necessarily lead to knowledge. And knowledge is not always sufficient to discover truth and breed wisdom." --Spaf
    Anyone who is capable of getting themselves made president should on no account be allowed to do the job. --Douglas Adams (1952-2001)
    "...people find it far easier to forgive others for being wrong than being right." - Albus Percival Wulfric Brian Dumbledore

  10. #10
    Priapistic Monk KorpDeath's Avatar
    Join Date
    Dec 2001
    Posts
    2,628
    Yes zenman you got it. this guy is a script maniac, everything that can be configured with a script is, which lends me to believe (and from the conversations I've had with him) that he doesn't understand the underlying technology very well. He just knows this script does this and that script does that. For instance we lost power one day a while back and the script that creates the ethernet interfaces didn't run properly. I asked him how he configures them and he stated all he does is run this script. bleh. For God's sake if you can'tget it done by hand what good are you?

    What's going to end up happening is I will replace all this custom junk with off the shelf utils ,like Nagios for network monitoring and webalizer for the web traffic analyzer and, hopefully, carefully, pry this custom built P.O.S. out of the network.

    But in the mean time I need to keep it up and running. So herein lies the rub. How do I disassemble this one part.

    If worse comes to worse I'll reboot the server when no one is watching.....some weekend 2 am-ish. Of course I'll have to next to it to make sure all his crap runs correctly. Ugh... I don't think this is paying me enough to sweat these things. My boss is gonna owe me big.

    Oh and Tim* thanks for that but I've checked the virtualhost stuff and there is nothing there. Honestly, the httpd.conf looks like it's default, save for a few security modifications.

    Thanks for all of your help and if you happen to come across something I'd appreciate a word or two if you can spare it.
    Mankind have a great aversion to intellectual labor; but even supposing knowledge to be easily attainable, more people would be content to be ignorant than would take even a little trouble to acquire it.
    - Samuel Johnson

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •