Apache

Apache

Known for its flexibility and extensive module support, making it ideal for complex, dynamic websites.

It uses a process-based model, where each request is handled by a separate thread or process, which can be resource-heavy under high traffic but provides great compatibility.

---

Configuration Files

• Main configuration files:

Standard

/etc/apache2/apache2.conf

RHEL

/etc/httpd/httpd.conf

FreeBSD

/etc/apache24/httpd.conf

• robots.txt: Directs web crawlers on which pages to crawl or avoid.

Virtual Host Configurations

• Default virtual host configuration: /etc/apache2/sites-enabled/000-default.conf

• Sites are configured in /etc/apache2/sites-available/ and activated using symlinks in /etc/apache2/sites-enabled/.

Modules Configuration

• /etc/apache2/mods-available/: Contains configuration files for all available modules.

  • .load: For loading the module.

  • .conf: For additional configuration.

• /etc/apache2/mods-enabled/: Contains symlinks to the enabled modules.

Logs

• Access logs:

  • /var/log/apache2/access.log

  • /var/log/httpd/access_log

• Error logs:

  • /var/log/apache2/error.log

  • /var/log/httpd/error_log

---

Default URL Paths

If mod_status is enabled:

• /server-info: Server health and performance monitoring.

• /server-status: Real-time status and diagnostic information about the server, including active requests, resource usage, and server performance.

Common Directories:

• /cgi-bin/: Directory for executing CGI scripts.

• /icons/: Often used for directory listings. It may expose unintended file paths.

Authentication

• .htaccess: Configures directory-specific rules for authentication and other settings.

• .htpasswd: Stores user credentials for basic authentication.

---

PHP Integration

• phpinfo.php: Disclose sensitive server and PHP configuration details.

---

PHP Modules

• To Allow PHP execution you need to add this line to /etc/apache2/apache2.conf:

LoadModule php_module /usr/lib/apache2/modules/libphp.so
    AddType application/x-httpd-php .php

• You can actually add any extension that you want:

AddType application/x-httpd-php .l33t