find an unknown URL

Okay I have a problem and I have used every trick in the book, keep in mind I'm no Apache guru but I do know enough.

The situation:
I have to make changes to the configuration of a database and now I can't restart the service. I believe the admin uses phppgadmin to do these types of things since it is installed but I don't know the URL. Is there any tool out there that can just scan port 80 for all URLs on the box. I'm not sure if I'm asking it the right way but I've tried multiple indexing utilities, etc. etc. and they don't work. It's a secure internal site and to make matters worse all the php is encoded and I don't have the source to view nor can I see the config files for just about anything.

I mean besides rebooting the server.......I've tried just restarting the sql service but no luck.

Apache
php
sql

Any ideas?

Is apache a service, in windows? I am assuming windows. since you didn't say but you talk about restarting services.

httpd.conf should have that info, or at least a place to start, but if you don't have access to the config files, this won't work. Have you looked at the doco for phpPgAdmin to see if it has a default path to use? I've never used it, so I don't know, but I know phpMyAdmin does have a specific place it goes by default if you don't choose otherwise. Can you access the phpPgAdmin conf files?

Korp: This may help you. http://www.samspade.org/d/ipdns.html

I'll look some more...

Thank you for your prompt responses.

Zencoder: the phppgadmin conf files are in php and therefore encoded. And, no, it's linux running apache, sorry should've stated that. I took it for granted because, of course, I knew. As for the httpd.conf it's bare bones, I'm sure all that is done in the encoded PHP, it would figure. This is why I was so stumped. None of the non-encoded files have anything useful in them. Damn coders, present company excepted, of course. :thumbsup: ;)

Donkey Punch: Thanks, I completely forgot about samspade, I'll see if it helps.

Have any of you tried Extract URL? It's seriously system intensive, while running I got the famous "cannot connect to database because there's too many connections" error on my server. I think it may have what I need now I just need to go through 38 megs of txt to find the exact URL.

I have a quesiton, why are all the scripts encrypted? That makes your job as a maintainer a pain in the ass. Also, the scripts are all server side anyway, does the developer not trust you guys?

It's a long story.. but to get to the heart of the matter. The developer WAS a full time employee but thinks the source code belongs to him and not the company so he's holding it ransom, so to speak. It's a mess, truly. And yes, it makes my job THAT much harder to do.

Okay, check your httpd.conf, and does it give any indication on where the vhosts are?

I'm not sure what you're trying to do. Find documents on the server to administer it through the web interface? Or are you simply trying to access MySQL so you can change some settings? MySQL configuration can be done through the terminal with "mysql -p username" (to sign in as that user, password prompt provided) and then using SQL queries from there.


If it is to find these "hidden" directories:

As Donkey Punch says, check out httpd.conf and look for virtual hosts. It should be marked off like so:

Code:

---

<VirtualHost ipaddy or *>
        DocumentRoot /web/www/html/
        ServerAdmin root@localhost
        ServerName example.com
        ServerAlias www.example.com
        DirectoryIndex index.php index.html index.htm
        <Directory "/web/www/html/">
                AllowOverride None
        </Directory>
        LogLevel warn
</VirtualHost>

---

Checkout Directory for the folder it is in. Then look at the file names, and try those names with the server name/alias as URLs. (You may need to use another computer, I have the bad luck of the server not responding to itself) Such as example.com/admin.php.

If there is a hidden file like ".htaccess" inside the directory (file browsing, not via web browser) you should open it and see what is in there. A .htaccess can rewrite URLs so that example.com/ubersecret could be redireted to example.com/hidden/sql/admin.php, etc.


Good luck.

Tim_axe, it's not MySQL, its PostgreSQL. phpPgAdmin is a util a lot like phpMyAdmin, but for postgres.

I was thinking the same thing...but it also depends on if he has app's or script's that need to be changed as well...sounds like a sticky situation. :( Best of luck.

Yes zenman you got it. this guy is a script maniac, everything that can be configured with a script is, which lends me to believe (and from the conversations I've had with him) that he doesn't understand the underlying technology very well. He just knows this script does this and that script does that. For instance we lost power one day a while back and the script that creates the ethernet interfaces didn't run properly. I asked him how he configures them and he stated all he does is run this script. bleh. For God's sake if you can'tget it done by hand what good are you?

What's going to end up happening is I will replace all this custom junk with off the shelf utils ,like Nagios for network monitoring and webalizer for the web traffic analyzer and, hopefully, carefully, pry this custom built P.O.S. out of the network.

But in the mean time I need to keep it up and running. So herein lies the rub. How do I disassemble this one part.

If worse comes to worse I'll reboot the server when no one is watching.....some weekend 2 am-ish. Of course I'll have to next to it to make sure all his crap runs correctly. Ugh... I don't think this is paying me enough to sweat these things. My boss is gonna owe me big.

Oh and Tim* thanks for that but I've checked the virtualhost stuff and there is nothing there. Honestly, the httpd.conf looks like it's default, save for a few security modifications.

Thanks for all of your help and if you happen to come across something I'd appreciate a word or two if you can spare it.

Looks like it is going to be a bitch to decode the files. I have Googled for hours and still have not found something to decrypt it. However, if there were a decrypter, Zend would prolly have a patch for it.

Looks like you will need to find another way. I will look some more.

Quote:

---

Originally posted here by KorpDeath
It's a secure internal site and to make matters worse all the php is encoded and I don't have the source to view nor can I see the config files for just about anything.

---

What exactly do you mean by "all the php is encoded"? Do you mean encoded or encrypted? What algorithm was it encoded/encrypted with? If it's simply "encoded" it's a matter of decoding it. Encryption is another story.
Another possible interpretation might be compiled, given that Zend's PHP Accelerator is effectively a PHP compiler. Is that the case here? If so, a liberal application of "strings" on the appropriate CGI might prove fruitful.

Quote:

---

I mean besides rebooting the server.......I've tried just restarting the sql service but no luck.
[...]
Any ideas?

---

Have you tried sending Apache a SIGHUP to force it to reload using its configuration files? In the process it will dump PHP and reinitialize everything.

Edit: After re-reading the thread, I have to ask, just WHAT are you trying to do Korp? Restart Postgres, or reload all web-dependant services??

Donkey - thanks bunches I have searched for days and the only answer to unencrypting/unencoding is good *****ing luck.

chsh - I'm trying to restart Postgres, because I made some changes to the config. The standard postgresql restart -stop - start shite doesn't work....neither does the service command for postgresql. I'd rather not sighup, I'm afraid I could do damage to the database going that route, ya know? What do you think?

Here's some more info I found out. It's using phpencoder and Turckmmcache to encrypt/encode the files. As far as I can see there is no way I can decode much of any of the files.

Hey, hey, here's an update. I finally found the little script that was used to restart Postgres. He hid it away in some random directory. Custom little jobby, of course.

Thanks muchly for everyone's help.

If anyone knows of any good ways to dissamble the code that'd be much appreciated, and teh final piece, but I'm not holding my breath.

Tragedy averted.

Quote:

---

If anyone knows of any good ways to dissamble the code that'd be much appreciated, and teh final piece, but I'm not holding my breath.

---

I will see what I can find. I thought it was Zend's encoder. If it is something else, then there might be better luck, but then again, maybe not. I know some people that crack ****, and maybe they might enjoy this. Do you mind sending a sample?

Jack