Downtime Downtime is when your site does not work. It's really bad.

Downtime is when your site does not work. If the site does not work - you'll not get any benefits from its existence. Downtime is opposite to uptime. There could be various reasons why a site does not work. Most usual cases: problems with server, server overload, application error, network problems and so on. The first step of fixing en error is detecting. There are special instruments, called website monitoring services, which may check sites for errors over the time. Such tools help you to detect error and provide primary analysis of its reasons. Also, usually some information could be found in server logs. If you have access to them, you should review. If not - ask your hosting company to provide them. Detecting of errors may help you to evaluate the reliability of your site and hosting.

  • CM.Glossary.WebsiteMonitoring
  • CM.Glossary.Uptime
  • CM.Glossary.WebHosting
  • CM.Glossary.Availability
more glossary

We use the service to be always aware of the case when on our website. A message on the mobile allows us to directly act at the right time to reduce costs. Very good service for any business.

- Spyros
Shellshock vulnerability online check
Considering the recently discovered Shellshock vulnerability, HostTracker has created a tool for testing it.
Check your server for vulnerability

How does it work?

It is developed for a Linux server with a web server installed on it. The algorithm is very simple. We consequently generate 4 http requests:

  • 1. Ordinary request
  • 2. The request tries, using vulneratility, post a "harmful" cookie which causes 2-seconds delay in respond to our special http request.
  • 3. The request tries, using vulneratility, post a "harmful" cookie which causes 4-seconds delay in respond to our special http request.
  • 4. Same as #3

Results of the test

How to understand the result?

We compare response time for all 4 requests. Three situation are possible:

  • 1. Vulnerability found. We may affirm that if the difference in responses is about 2 seconds for requests without cookie and with 2-second-delay cookie, as well as for requests with 2 and 4-second delay cookie. It means that our request was able to use the vulnerability and set these cookies.
  • 2. Vulnerability not found. All the requests have about the same response time. The cookies, likely, were not installed because there is no vulnerability.
  • 3. Uncertain situation. If the response time differs widely, without coincidence with preset by cookies delay, we can not say for sure. It could be if the server is under high load. To check this, we use two requests with same cookies (#3 and #4). If the response time for two same checks varies, we make a conclusion that the response time is not affected by cookies. At least, not only by them. So in this case our method can not detect vulnerability

Safety of checks

Our test can not damage your server. The risk consists of appearance of one extra-cookie, which is used only for our requests and can not affect normal work-flow of your site.

more blog
Home > Sign Up