π Publication on Habr
π Test version: README
REST API and Web server on base .NET HttpListener and backend only PowerShell Core (except for Web endpoints where minimal HTML, CSS, and JavaScript are used). Using WinAPI, you can quickly set up remote communication with Windows OS using API, without the need to configure WinRM or OpenSSH and get control from any platform, including Linux via browser or any REST client.
π Implemented:
- β Frontend web interface
- β Viewing and filtering Windows events
- β More than 20 unique endpoints
- β Authentication
- β Response codes handling
- β Converting to 4 data types
- β Error handling
- β Control module
- β Logging
πΏ The server functionality is implemented in the Kinozal-Bot project.
π§ Since the server is built on .NET, this implementation is cross-platform, you can try managing Linux services from a Windows system: dotNET-Systemd-API.
β‘οΈ π Install
β‘οΈ π Examples
- Process management:
- Service management:
- Hardware statistics:
- Physical and logical disk statistics, metrics IOps, SMART (via embedded module Storage 2.0) and current network stats.
To give you an example, a file download from the Internet was taking place on a remote machine:
- Sensors from LibreHardwareMonitor:
All GET requests can be output in one of the following formats: JSON (default), HTML, XML, CSV. When using a browser for GET requests, by default the response is processed in table format using HTML markup.
- GET
/api/service
- Get list all services
/apt/service/service_name
- Get list service by the specified name passed in URL (using wildcard format)
/apt/process
- Get a list all running processes in an easy-to-read format (includes CPU and IOps performance)
/apt/process/process_name
- Get list running processes by the specified name passed in URL (using wildcard format)
/api/files
- Get a list of files and directories at the specified path in the Path header with the size, number of child files and directories, date of creation, access and modification
- GET metrics from WMI/CIMv2 (Common Information Model)
/api/hardware
- Output of summary statistics of metrics close to Task Manager
/api/performance
- Output metrics from Counter
/api/cpu
- CPU use to procent for all core and total
/api/memory
- Memory use to GB and procent
/api/memory/slots
- Number of memory slots and their frequency
/api/disk/physical
- List of all physical disks, model, size, operation status and errors
/api/disk/logical
- List of all logical disks, model and size
/api/disk/partition
- List partitions of all physical disks
/api/disk/smart
- Temperature, health status, power on hours, start and stop cycle count
/api/disk/iops
- Read and write speed, queue, Input and Output operations per second for all physical disks
/api/video
- List of all video adapters, video memory size and resolution
/api/network
- List of all network adapters and their settings
api/network/ipconfig
- Settings for all network interfaces
api/network/stat
- Network connection statistics (ports)
api/network/interface/stat/current
- Current statistics of the active network interface (formatted dat)
api/network/interface/stat/total
- General statistics of the active network interface since system boot (raw data)
/api/update
- Windows update list
/api/software
- Installed software list
/api/driver
- Unique driver list
- GET metrics from Open Hardware Monitor via WMI/CIM
/api/sensor
- Summary table of all sensors
Source module: PowerShellHardwareMonitor (module installation is not required)
- Web
HTTP server. Endpoints only via Web Browser.
/service
- Checking status, starting and stopping services
/process
- Characteristics as well as starting and stopping processes
/events/list
- List of all Windows event providers
/events/<Event_Name>
- List of all events of the selected log with the ability to filter by content
π‘ Use the text entry form to filter messages through the browser
- POST
/apt/service/<Service_Name>
- Stop, start and restart services by name (only one at a time, not wildcard format), status is transmitted in the request header (Status: <Stop/Start/Restart>). Upon execution, the service status is returned in the format of a GET request.
/apt/process/<Process_Name>
- Check the number of running processes (Status: Check), stop a process by name (Status: Stop) and start a process (Status: Start). To start a process, you can use the function to search for an executable file in the file system by its name, but you can also pass the path to the executable file through the request header (e.g. Path: C:\Program Files\qBittorrent\qbittorrent.exe).
/api/file-delete
- Deleting the file or directory specified in the header Path one at a time
To find an executable file, the Find-Process
function is used to scan the following directories:
"C:\Program Files",
"C:\Program Files (x86)",
"C:\Users\<UserName>\AppData\Roaming",
"C:\Users\<UserName>\Documents"
Use in PowerShell Core.
Use the NuGet package manager:
Install-Module ps.win.api -Repository NuGet -AllowClobber
π‘ You must have a NuGet repository registered:
Register-PSRepository -Name "NuGet" -SourceLocation "https://www.nuget.org/api/v2" -InstallationPolicy Trusted
You can use this command to install a module (includes the server part) from the GitHub repository:
Invoke-Expression(New-Object Net.WebClient).DownloadString("https://github.com/raw/Lifailon/WinAPI/rsa/WinAPI/Deploy/deploy-module-ps.win.api.ps1")
Wait for the command output: Completed
To find out where the module is installed, use the command:
> $(Get-Module ps.win.api).Path
C:\Users\lifailon\Documents\PowerShell\Modules\ps.win.api\0.4.3\ps.win.api.psm1
You can configure port, login and password for connect to the server in the configuration file WinAPI.ini
, which is located in the directory with the module:
port = 8443
user = rest
pass = api
Open the specified port on your firewall:
New-NetFirewallRule -DisplayName "WinAPI" -Profile Any -Direction Inbound -Action Allow -Protocol TCP -LocalPort 8443
Use the following commands to start and check the operation status server: Start-WinAPI
and Test-WinAPI
> Start-WinAPI
> Test-WinAPI
Port Status
---- ------
8443 Open
To stop the server: Stop-WinAPI
> Stop-WinAPI
> Test-WinAPI
Port Status
---- ------
8443 Closed
Each call to the endpoint is logged to the WinAPI.log
file. You can disable logging:
Log_File = True
Or output the current log in the console (tail
mode):
> Read-WinAPI
06.02.2024 04:41:58 Start server
06.02.2024 04:41:58 192.168.3.99:18447 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 => GET / => 200
06.02.2024 04:43:45 Start server
06.02.2024 04:43:55 192.168.3.99:19107 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 => GET /process => 200
06.02.2024 04:43:56 192.168.3.99:19107 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 => GET /service => 200
...
Specify the data source for the /api/sensor
endpoint (default: LibreHardwareMonitor):
SensorSource = OpenHardwareMonitor
π‘ For the endpoint to work, you must download the portable version of the LibreHardwareMonitor (Default) or OpenHardwareMonitor program in path C:\Users\<UserName>\Documents\LibreHardwareMonitor
and C:\Users\<UserName>\Documents\OpenHardwareMonitor\OpenHardwareMonitor
.
For a quick installation LibreHardwareMonitor, use this command in your terminal:
Invoke-Expression(New-Object Net.WebClient).DownloadString("https://github.com/raw/Lifailon/PowerShell.HardwareMonitor/rsa/Install/Install-LibreHardwareMonitor.ps1")
Install OpenHardwareMonitor:
Invoke-Expression(New-Object Net.WebClient).DownloadString("https://github.com/raw/Lifailon/PowerShell.HardwareMonitor/rsa/Install/Install-OpenHardwareMonitor.ps1")
There are other ways to start the server, but they are not supported since version 0.4 and the advent the module.
- Running service (added in version 0.3.1)
π‘ For reason unknown to me, the service doesn't process all the code on startup (doesn't create an ini file and hangs at POST request to stop the process).
To install the server part as a service (used NSSM), download scripts to automatically deployument, start, stop and remove.
- Running executable (added in version 0.3.0)
π‘ PowerShell 5.1 acts as the default handler (limitations of the ps2exe module), which prevents all endpoints from working correctly
There are two options for launching using an executable file (build script).
winapi-console.exe - process startup in a window with logging output of connections to the server
winapi-process.exe - background process startup
To stop the background process, use the command: Get-Process *winapi* | Stop-Process
Module for server management (starting and stopping background process) and interaction with remote server. The module implements most of the functions used in the server part to run on a local computer and receive the same information from a remote computer via WinAPI.
> Import-Module ps.win.api
> Get-command -Module ps.win.api
CommandType Name Version Source
----------- ---- ------- ------
Function Find-Process 0.4.3 WinAPI
Function Get-CPU 0.4.3 WinAPI
Function Get-DiskLogical 0.4.3 WinAPI
Function Get-DiskPartition 0.4.3 WinAPI
Function Get-DiskPhysical 0.4.3 WinAPI
Function Get-Driver 0.4.3 WinAPI
Function Get-Event 0.4.3 WinAPI
Function Get-Files 0.4.3 WinAPI
Function Get-Hardware 0.4.3 WinAPI
Function Get-HardwareNoJob 0.4.3 WinAPI
Function Get-IOps 0.4.3 WinAPI
Function Get-MemorySize 0.4.3 WinAPI
Function Get-MemorySlots 0.4.3 WinAPI
Function Get-NetInterfaceStat 0.4.3 WinAPI
Function Get-NetIpConfig 0.4.3 WinAPI
Function Get-NetStat 0.4.3 WinAPI
Function Get-Performance 0.4.3 WinAPI
Function Get-ProcessPerformance 0.4.3 WinAPI
Function Get-Smart 0.4.3 WinAPI
Function Get-Software 0.4.3 WinAPI
Function Get-VideoCard 0.4.3 WinAPI
Function Get-WinUpdate 0.4.3 WinAPI
Function Read-WinAPI 0.4.3 WinAPI
Function Start-WinAPI 0.4.3 WinAPI
Function Stop-WinAPI 0.4.3 WinAPI
Function Test-WinAPI 0.4.3 WinAPI
The format is always the same, if you don't use the ComputerName parameter, the function runs locally on your computer. If you use the ComputerName parameter, we access the desired endpoint and get a response from the WinAPI server.
Example:
> Get-DiskPhysical | Format-Table
Model Size PartitionCount Interface Status ConfigManagerErrorCode LastErrorCode
----- ---- -------------- --------- ------ ---------------------- -------------
WD PC SN740 SDDPNQD-1T00-1027 954 Gb 4 SCSI OK 0
> Get-DiskPhysical -ComputerName 192.168.3.100 -Port 8443 -User rest -Pass api | Format-Table
Model Size PartitionCount Interface Status ConfigManagerErrorCode LastErrorCode
----- ---- -------------- --------- ------ ---------------------- -------------
ST1000DM003-1CH162 932 Gb 1 IDE OK 0
WDC WD2005FBYZ-01YCBB2 1863 Gb 1 IDE OK 0
MSI M390 250GB 233 Gb 3 SCSI OK 0
π‘ The Get-Hardware function uses the ThreadJob module, the script provides automatic installation in case of its absence. This is the only function which execution time was reduced by half due to threads (on average 3.3 seconds versus 1.4 seconds).
Base authorization has been implemented (based on Base64).
Default login and password:
$user = "rest"
$pass = "api"
- Example 1.
$SecureString = ConvertTo-SecureString $pass -AsPlainText -Force
$Credential = New-Object System.Management.Automation.PSCredential($user, $SecureString)
Invoke-RestMethod -Credential $Credential -AllowUnencryptedAuthentication -Uri http://192.168.3.99:8443/api/service
- Example 2.
$EncodingCred = [System.Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes("${user}:${pass}"))
$Headers = @{"Authorization" = "Basic ${EncodingCred}"}
Invoke-RestMethod -Headers $Headers -Uri http://192.168.3.99:8443/api/service
- Example 3. cURL client. Receiving data in different formats.
user="rest"
pass="api"
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/service | jq -r '.[] | {data: "\(.Name) - \(.Status)"} | .data'
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/service/win
curl -s -X GET -u $user:$pass -H 'Content-Type: application/json' http://192.168.3.99:8443/api/service/winrm
curl -s -X GET -u $user:$pass -H 'Content-Type: application/html' http://192.168.3.99:8443/api/service/winrm
curl -s -X GET -u $user:$pass -H 'Content-Type: application/xml' http://192.168.3.99:8443/api/service/winrm
curl -s -X GET -u $user:$pass -H 'Content-Type: application/csv' http://192.168.3.99:8443/api/service/winrm
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/process
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/process/torrent
It is possible to configure filtering by IP address or subnet. It is possible to configure other authentication methods to HttpListener.
200. Request completed successfully.
400. Bad Request. Invalid header and service or process could not be found.
401. Unauthorized. Login or password is invalid.
404. Not found endpoint. Response to the lack of endpoints.
405. Method not allowed. Response to other methods.
Processing of simultaneous requests from several clients (managed to test three simultaneous connections).
If the previous request has not been processed yet and a new request from the same client arrives, the server terminates with an error, this behavior was detected in the browser when quickly refreshing pages, to handle this event is implemented automatic restart of the server. For Web-client such restart is processed without error and in the process of page refresh the response of the last request is returned.
In Invoke-RestMethod and curl, interrupting the previous request and sending a new one to another endpoint works without error and the response of the last request is returned (taking into account the processing time of the previous one).
- Stop and start service WinRM:
First find the service to pass its full name to the to url for POST request (example, using part of the name in GET request).
user="rest"
pass="api"
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/service/win | jq -r .[].Name
curl -s -X POST -u $user:$pass --data '' http://192.168.3.99:8443/api/service/winrm -H "Status: Stop"
curl -s -X POST -u $user:$pass --data '' http://192.168.3.99:8443/api/service/winrm -H "Status: Start"
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/service/winrm | jq -r .Status
- Stop and start process qBittorrent:
First find the process by its name in wilcard format using a GET request. Using Check in the Status header, we display the number of running processes. To stop the process, use header Status: Stop. To run the process, two examples are given using the name to find the executable and the second option, specify the full path to the executable.
user="rest"
pass="api"
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/process/torrent
curl -s -X POST -u $user:$pass --data '' http://192.168.3.99:8443/api/process/qbittorrent -H "Status: Check"
curl -s -X POST -u $user:$pass --data '' http://192.168.3.99:8443/api/process/qbittorrent -H "Status: Stop"
curl -s -X POST -u $user:$pass --data '' http://192.168.3.99:8443/api/process/qbittorrent -H "Status: Start"
- Stop and start process Plex Media Server:
If the service in the name contains spaces, pass the name in the url request using the underscore (_) delimiter.
user="rest"
pass="api"
curl -s -X POST -u $user:$pass --data '' http://192.168.3.99:8443/api/process/plex_media_server -H "Status: Stop"
curl -s -X POST -u $user:$pass --data '' http://192.168.3.99:8443/api/process/plex_media_server -H "Status: Start" -H "Path: C:\Program Files\Plex\Plex Media Server\Plex Media Server.exe"
- Delete file
First, we look through the parent directories and look for the required file. In the Path header we pass the FullName of the desired file (or directory).
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/files -H "Path: D:/"
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/files -H "Path: D:/Movies"
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/files -H "Path: D:/Movies/The-Flash"
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/files -H "Path: D:/Movies/The-Flash/4 sezon"
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/files -H "Path: D:/Movies/The-Flash/4 sezon/The.Flash.S04E23.1080p.rus.LostFilm.TV.mkv"
curl -s -X POST -u $user:$pass -data '' http://192.168.3.99:8443/api/file-delete -H "Path: D:/Movies/The-Flash/4 sezon/The.Flash.S04E23.1080p.rus.LostFilm.TV.mkv"
$user = "rest"
$pass = "api"
$EncodingCred = [System.Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes("${user}:${pass}"))
- Stop service WinRM:
$Headers = @{"Authorization" = "Basic ${EncodingCred}"}
$Headers += @{"Status" = "Stop"}
Invoke-RestMethod -Headers $Headers -Uri http://192.168.3.99:8443/api/service/winrm
Invoke-RestMethod -Headers $Headers -Method Post -Uri http://192.168.3.99:8443/api/service/winrm
- Start service WinRM:
$Headers = @{"Authorization" = "Basic ${EncodingCred}"}
$Headers += @{"Status" = "Start"}
Invoke-RestMethod -Headers $Headers -Method Post -Uri http://192.168.3.99:8443/api/service/winrm
Examples:
user=rest
pass=api
curl -s -X GET -u $user:$pass -H 'Content-Type: application/json' http://192.168.3.99:8443/api/service/win | jq
[
{
"Name": "WinAPI",
"DisplayName": "WinAPI",
"Status": "Stopped",
"StartType": "Manual"
},
{
"Name": "WinDefend",
"DisplayName": "Π‘Π»ΡΠΆΠ±Π° Π°Π½ΡΠΈΠ²ΠΈΡΡΡΠ½ΠΎΠΉ ΠΏΡΠΎΠ³ΡΠ°ΠΌΠΌΡ Microsoft Defender",
"Status": "Running",
"StartType": "Automatic"
},
{
"Name": "WinHttpAutoProxySvc",
"DisplayName": "Π‘Π»ΡΠΆΠ±Π° Π°Π²ΡΠΎΠΌΠ°ΡΠΈΡΠ΅ΡΠΊΠΎΠ³ΠΎ ΠΎΠ±Π½Π°ΡΡΠΆΠ΅Π½ΠΈΡ Π²Π΅Π±-ΠΏΡΠΎΠΊΡΠΈ WinHTTP",
"Status": "Running",
"StartType": "Manual"
},
{
"Name": "Winmgmt",
"DisplayName": "ΠΠ½ΡΡΡΡΠΌΠ΅Π½ΡΠ°ΡΠΈΠΉ ΡΠΏΡΠ°Π²Π»Π΅Π½ΠΈΡ Windows",
"Status": "Running",
"StartType": "Automatic"
},
{
"Name": "WinRM",
"DisplayName": "Π‘Π»ΡΠΆΠ±Π° ΡΠ΄Π°Π»Π΅Π½Π½ΠΎΠ³ΠΎ ΡΠΏΡΠ°Π²Π»Π΅Π½ΠΈΡ Windows (WS-Management)",
"Status": "Stopped",
"StartType": "Manual"
}
]
curl -s -X GET -u $user:$pass -H 'Content-Type: application/xml' http://192.168.3.99:8443/api/service/winrm | xq
<?xml version="1.0" encoding="utf-8"?>
<Objects>
<Object Type="System.Management.Automation.PSCustomObject">
<Property Name="Name" Type="System.String">WinRM</Property>
<Property Name="DisplayName" Type="System.String">Π‘Π»ΡΠΆΠ±Π° ΡΠ΄Π°Π»Π΅Π½Π½ΠΎΠ³ΠΎ ΡΠΏΡΠ°Π²Π»Π΅Π½ΠΈΡ Windows (WS-Management)</Property>
<Property Name="Status" Type="System.String">Stopped</Property>
<Property Name="StartType" Type="System.String">Manual</Property>
</Object>
</Objects>
curl -s -X GET -u $user:$pass -H 'Content-Type: application/csv' http://192.168.3.99:8443/api/service/winrm
"Name","DisplayName","Status","StartType" "WinRM","Π‘Π»ΡΠΆΠ±Π° ΡΠ΄Π°Π»Π΅Π½Π½ΠΎΠ³ΠΎ ΡΠΏΡΠ°Π²Π»Π΅Π½ΠΈΡ Windows (WS-Management)","Stopped","Manual"
curl -s -X GET -u $user:$pass -H 'Content-Type: application/html' http://192.168.3.99:8443/api/service/winrm
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <title>HTML TABLE</title> </head><body> <table> <colgroup><col/><col/><col/><col/></colgroup> <tr><th>Name</th><th>DisplayName</th><th>Status</th><th>StartType</th></tr> <tr><td>WinRM</td><td>Π‘Π»ΡΠΆΠ±Π° ΡΠ΄Π°Π»Π΅Π½Π½ΠΎΠ³ΠΎ ΡΠΏΡΠ°Π²Π»Π΅Π½ΠΈΡ Windows (WS-Management)</td><td>Stopped</td><td>Manual</td></tr> </table> </body></html>
lifailon@hv-devops-01:~$ user="rest"
lifailon@hv-devops-01:~$ pass="api"
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/service/win
[
{
"Name": "WinDefend",
"DisplayName": "Π‘Π»ΡΠΆΠ±Π° Π°Π½ΡΠΈΠ²ΠΈΡΡΡΠ½ΠΎΠΉ ΠΏΡΠΎΠ³ΡΠ°ΠΌΠΌΡ Microsoft Defender",
"Status": "Running",
"StartType": "Automatic"
},
{
"Name": "WinHttpAutoProxySvc",
"DisplayName": "Π‘Π»ΡΠΆΠ±Π° Π°Π²ΡΠΎΠΌΠ°ΡΠΈΡΠ΅ΡΠΊΠΎΠ³ΠΎ ΠΎΠ±Π½Π°ΡΡΠΆΠ΅Π½ΠΈΡ Π²Π΅Π±-ΠΏΡΠΎΠΊΡΠΈ WinHTTP",
"Status": "Running",
"StartType": "Manual"
},
{
"Name": "Winmgmt",
"DisplayName": "ΠΠ½ΡΡΡΡΠΌΠ΅Π½ΡΠ°ΡΠΈΠΉ ΡΠΏΡΠ°Π²Π»Π΅Π½ΠΈΡ Windows",
"Status": "Running",
"StartType": "Automatic"
},
{
"Name": "WinRM",
"DisplayName": "Π‘Π»ΡΠΆΠ±Π° ΡΠ΄Π°Π»Π΅Π½Π½ΠΎΠ³ΠΎ ΡΠΏΡΠ°Π²Π»Π΅Π½ΠΈΡ Windows (WS-Management)",
"Status": "Stopped",
"StartType": "Manual"
}
]
curl -s -X GET -u $user:$pass -H 'Content-Type: application/json' http://192.168.3.99:8443/api/service/winrm
{
"Name": "WinRM",
"DisplayName": "Π‘Π»ΡΠΆΠ±Π° ΡΠ΄Π°Π»Π΅Π½Π½ΠΎΠ³ΠΎ ΡΠΏΡΠ°Π²Π»Π΅Π½ΠΈΡ Windows (WS-Management)",
"Status": "Stopped",
"StartType": "Manual"
}
curl -s -X POST -u $user:$pass --data '' http://192.168.3.99:8443/api/service/winrm -H "Status: Start"
{
"Name": "winrm",
"DisplayName": "Π‘Π»ΡΠΆΠ±Π° ΡΠ΄Π°Π»Π΅Π½Π½ΠΎΠ³ΠΎ ΡΠΏΡΠ°Π²Π»Π΅Π½ΠΈΡ Windows (WS-Management)",
"Status": "Running",
"StartType": "Manual"
}
curl -s -X POST -u $user:$pass --data '' http://192.168.3.99:8443/api/process/qbittorrent -H "Status: Check"
Number active qbittorrent processes: 0
curl -s -X POST -u $user:$pass --data '' http://192.168.3.99:8443/api/process/qbittorrent -H "Status: Start"
Number active qbittorrent processes: 1
curl -s -u $user:$pass http://192.168.3.99:8443/api/process/qbittorrent
{
"Name": "qbittorrent",
"ProcTime": "0 %",
"IOps": 3,
"IObsRead": "1,84 Mb",
"IObsWrite": "0,00 Mb",
"RunTime": "06:57:59",
"TotalTime": "00:01:42",
"UserTime": "00:01:09",
"PrivTime": "00:00:33",
"WorkingSet": "323,29 Mb",
"PeakWorkingSet": "366,97 Mb",
"PageMemory": "965,08 Mb",
"Threads": 25,
"Handles": 623,
"Path": "C:\\Program Files\\qBittorrent\\qbittorrent.exe",
"Company": "The qBittorrent Project",
"Version": "v4.6.0"
}
curl -s -X POST -u $user:$pass --data '' http://192.168.3.99:8443/api/process/qbittorrent -H "Status: Stop"
Number active qbittorrent processes: 0
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/hardware
{
"Host": "HUAWEI-BOOK",
"Uptime": "17:17",
"BootDate": "01.02.2024 09:05:04",
"Owner": "lifailon",
"OS": "ΠΠ°ΠΉΠΊΡΠΎΡΠΎΡΡ Windows 10 Pro",
"Motherboard": "HUAWEI MRGF-XX-PCB M1010",
"Processor": "12th Gen Intel(R) Core(TM) i7-1260P",
"Core": 12,
"Thread": 16,
"CPU": "14 %",
"ProcessCount": 305,
"ThreadsCount": 4641,
"HandlesCount": 157065,
"MemoryAll": "16 GB",
"MemoryUse": "11,00 GB",
"MemoryUseProc": "70 %",
"WorkingSet": "11,06 GB",
"PageMemory": "12,54 GB",
"MemorySlots": 8,
"PhysicalDiskCount": 1,
"PhysicalDiskAllSize": "954 Gb",
"LogicalDiskCount": 3,
"LogicalDiskAllSize": "1053 Gb",
"DiskTotalTime": "2 %",
"DiskTotalIOps": 3,
"DiskTotalRead": "0,015 MByte/Sec",
"DiskTotalWrite": "0,000 MByte/Sec",
"VideoCardCount": 3,
"VideoCardAllSize": "1 Gb",
"NetworkAdapterEnableCount": 3,
"NetworkReceivedCurrent": "0,154 MByte/Sec",
"NetworkSentCurrent": "0,044 MByte/Sec",
"NetworkReceivedTotal": "4,13 GByte",
"NetworkSentTotal": "0,34 GByte",
"PortListenCount": 50,
"PortEstablishedCount": 54
}
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/performance
{
"CPUTotalTime": "1 %",
"MemoryUse": "30 %",
"DiskTotalTime": "12 %",
"AdapterName": "intel[r] wi-fi 6e ax211 160mhz",
"AdapterSpeed": "0,093 MByte/Sec"
}
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/cpu
[
{
"Name": "0",
"ProcessorTime": "8 %",
"PrivilegedTime": "6 %",
"UserTime": "6 %",
"InterruptTime": "0 %",
"IdleTime": "79 %"
},
{
"Name": "1",
"ProcessorTime": "0 %",
"PrivilegedTime": "0 %",
"UserTime": "0 %",
"InterruptTime": "0 %",
"IdleTime": "99 %"
},
{
"Name": "2",
"ProcessorTime": "2 %",
"PrivilegedTime": "0 %",
"UserTime": "6 %",
"InterruptTime": "0 %",
"IdleTime": "98 %"
},
{
"Name": "3",
"ProcessorTime": "8 %",
"PrivilegedTime": "18 %",
"UserTime": "0 %",
"InterruptTime": "0 %",
"IdleTime": "76 %"
},
{
"Name": "4",
"ProcessorTime": "0 %",
"PrivilegedTime": "0 %",
"UserTime": "0 %",
"InterruptTime": "0 %",
"IdleTime": "99 %"
},
{
"Name": "5",
"ProcessorTime": "8 %",
"PrivilegedTime": "18 %",
"UserTime": "0 %",
"InterruptTime": "0 %",
"IdleTime": "76 %"
},
{
"Name": "6",
"ProcessorTime": "0 %",
"PrivilegedTime": "0 %",
"UserTime": "0 %",
"InterruptTime": "0 %",
"IdleTime": "100 %"
},
{
"Name": "7",
"ProcessorTime": "8 %",
"PrivilegedTime": "18 %",
"UserTime": "0 %",
"InterruptTime": "0 %",
"IdleTime": "76 %"
},
{
"Name": "8",
"ProcessorTime": "14 %",
"PrivilegedTime": "12 %",
"UserTime": "6 %",
"InterruptTime": "0 %",
"IdleTime": "68 %"
},
{
"Name": "9",
"ProcessorTime": "33 %",
"PrivilegedTime": "18 %",
"UserTime": "18 %",
"InterruptTime": "0 %",
"IdleTime": "60 %"
},
{
"Name": "10",
"ProcessorTime": "27 %",
"PrivilegedTime": "12 %",
"UserTime": "18 %",
"InterruptTime": "0 %",
"IdleTime": "68 %"
},
{
"Name": "11",
"ProcessorTime": "27 %",
"PrivilegedTime": "18 %",
"UserTime": "12 %",
"InterruptTime": "0 %",
"IdleTime": "62 %"
},
{
"Name": "12",
"ProcessorTime": "27 %",
"PrivilegedTime": "6 %",
"UserTime": "24 %",
"InterruptTime": "0 %",
"IdleTime": "71 %"
},
{
"Name": "13",
"ProcessorTime": "14 %",
"PrivilegedTime": "12 %",
"UserTime": "6 %",
"InterruptTime": "0 %",
"IdleTime": "76 %"
},
{
"Name": "14",
"ProcessorTime": "21 %",
"PrivilegedTime": "18 %",
"UserTime": "6 %",
"InterruptTime": "0 %",
"IdleTime": "69 %"
},
{
"Name": "15",
"ProcessorTime": "0 %",
"PrivilegedTime": "0 %",
"UserTime": "0 %",
"InterruptTime": "0 %",
"IdleTime": "94 %"
},
{
"Name": "_Total",
"ProcessorTime": "11 %",
"PrivilegedTime": "9 %",
"UserTime": "6 %",
"InterruptTime": "0 %",
"IdleTime": "80 %"
}
]
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/memory
{
"MemoryAll": "15,73 GB",
"MemoryUse": "10,98 GB",
"MemoryUseProc": "70 %",
"PageSize": "48,00 GB",
"PageUse": "7,92 GB",
"PageUseProc": "17 %",
"PagePath": "D:\\pagefile.sys",
"MemoryVirtAll": "63,73 GB",
"MemoryVirtUse": "18,90 GB",
"MemoryVirtUseProc": "30 %",
"ProcWorkingSet": "11,02 GB",
"ProcPageMemory": "12,62 GB"
}
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/memory/slots
[
{
"Tag": "Physical Memory 0",
"Model": "5200 Mhz ",
"Size": "2048 Mb",
"Device": "Controller0-ChannelA",
"Bank": "BANK 0"
},
{
"Tag": "Physical Memory 1",
"Model": "5200 Mhz ",
"Size": "2048 Mb",
"Device": "Controller0-ChannelB",
"Bank": "BANK 1"
},
{
"Tag": "Physical Memory 2",
"Model": "5200 Mhz ",
"Size": "2048 Mb",
"Device": "Controller0-ChannelC",
"Bank": "BANK 2"
},
{
"Tag": "Physical Memory 3",
"Model": "5200 Mhz ",
"Size": "2048 Mb",
"Device": "Controller0-ChannelD",
"Bank": "BANK 3"
},
{
"Tag": "Physical Memory 4",
"Model": "5200 Mhz ",
"Size": "2048 Mb",
"Device": "Controller1-ChannelA",
"Bank": "BANK 0"
},
{
"Tag": "Physical Memory 5",
"Model": "5200 Mhz ",
"Size": "2048 Mb",
"Device": "Controller1-ChannelB",
"Bank": "BANK 1"
},
{
"Tag": "Physical Memory 6",
"Model": "5200 Mhz ",
"Size": "2048 Mb",
"Device": "Controller1-ChannelC",
"Bank": "BANK 2"
},
{
"Tag": "Physical Memory 7",
"Model": "5200 Mhz ",
"Size": "2048 Mb",
"Device": "Controller1-ChannelD",
"Bank": "BANK 3"
}
]
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/video
[
{
"Model": "Intel(R) Iris(R) Xe Graphics",
"Display": "3120x2080",
"VideoRAM": "1 Gb"
},
{
"Model": "Virtual Display Device",
"Display": "3840x2560",
"VideoRAM": "0 Gb"
},
{
"Model": "Citrix Indirect Display Adapter",
"Display": "x",
"VideoRAM": "0 Gb"
}
]
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/disk/physical
{
"Model": "WD PC SN740 SDDPNQD-1T00-1027",
"Size": "954 Gb",
"PartitionCount": 4,
"Interface": "SCSI",
"Status": "OK",
"ConfigManagerErrorCode": 0,
"LastErrorCode": null
}
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/disk/logical
[
{
"Logical_Disk": "C:",
"FileSystem": "NTFS",
"VolumeName": "",
"AllSize": "153 Gb",
"FreeSize": "44 Gb",
"Free": "29 %"
},
{
"Logical_Disk": "D:",
"FileSystem": "NTFS",
"VolumeName": "",
"AllSize": "800 Gb",
"FreeSize": "413 Gb",
"Free": "52 %"
},
{
"Logical_Disk": "G:",
"FileSystem": "FAT32",
"VolumeName": "Google Drive",
"AllSize": "100 Gb",
"FreeSize": "42 Gb",
"Free": "42 %"
}
]
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/disk/iops
[
{
"Name": "0 D: C:",
"ReadWriteTime": "0 %",
"ReadTime": "0 %",
"WriteTime": "0 %",
"IdleTime": "99 %",
"QueueLength": 0,
"BytesPersec": "0,000 MByte/Sec",
"ReadBytesPersec": "0,000 MByte/Sec",
"WriteBytesPersec": "0,000 MByte/Sec",
"IOps": 0,
"ReadsIOps": 0,
"WriteIOps": 0
},
{
"Name": "_Total",
"ReadWriteTime": "0 %",
"ReadTime": "0 %",
"WriteTime": "0 %",
"IdleTime": "99 %",
"QueueLength": 0,
"BytesPersec": "0,000 MByte/Sec",
"ReadBytesPersec": "0,000 MByte/Sec",
"WriteBytesPersec": "0,000 MByte/Sec",
"IOps": 0,
"ReadsIOps": 0,
"WriteIOps": 0
}
]
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/disk/smart
{
"DiskName": "WD PC SN740 SDDPNQD-1T00-1027",
"Temperature": 61,
"HealthStatus": "Healthy",
"OperationalStatus": "OK",
"MediaType": "SSD",
"BusType": "NVMe",
"PowerOnHours": null,
"StartStopCycleCount": null
}
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/network/interface/stat/current
{
"Name": "Intel[R] Wi-Fi 6E AX211 160MHz",
"Total": "0,087 MByte/Sec",
"Received": "0,063 MByte/Sec",
"Sent": "0,024 MByte/Sec",
"PacketsPersec": 416,
"PacketsReceivedPersec": 189,
"PacketsReceivedUnicastPersec": 189,
"PacketsReceivedNonUnicastPersec": 0,
"PacketsReceivedDiscarded": 0,
"PacketsReceivedErrors": 0,
"PacketsSentPersec": 226,
"PacketsSentUnicastPersec": 226,
"PacketsSentNonUnicastPersec": 0
}
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/network/interface/stat/total
{
"Name": "Intel[R] Wi-Fi 6E AX211 160MHz",
"Total": "4,73 GByte",
"Received": "4,36 GByte",
"Sent": "0,37 GByte",
"PacketsPersec": 9163133,
"PacketsReceivedPersec": 5580358,
"PacketsReceivedUnicastPersec": 5540535,
"PacketsReceivedNonUnicastPersec": 39823,
"PacketsReceivedDiscarded": 0,
"PacketsReceivedErrors": 0,
"PacketsSentPersec": 3582775,
"PacketsSentUnicastPersec": 3572843,
"PacketsSentNonUnicastPersec": 9932
}
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/network/stat | jq .[-1]
{
"ProcessName": "svchost",
"LocalAddress": "0.0.0.0",
"LocalPort": 135,
"RemotePort": 0,
"RemoteHostName": "",
"RemoteAddress": "0.0.0.0",
"State": 2,
"CreationTime": "2024-02-03T01:08:07+03:00",
"RunTime": "3.16:47:13",
"ProcessPath": "C:\\Windows\\system32\\svchost.exe"
}
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/network/ipconfig | jq .[-1]
{
"Description": "Hyper-V Virtual Ethernet Adapter #2",
"IPAddress": "172.22.48.1 fe80::1637:f6c9:59b9:dc6f",
"GatewayDefault": "",
"Subnet": "255.255.240.0 64",
"DNSServer": "",
"MACAddress": "00:15:5D:CB:0C:CD",
"DHCPEnabled": false,
"DHCPServer": null,
"DHCPLeaseObtained": null,
"DHCPLeaseExpires": null
}
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/driver | jq .[-1]
{
"DriverProviderName": "WireGuard LLC",
"FriendlyName": "ProtonVPN Tunnel",
"Description": "Wintun Userspace Tunnel",
"DriverVersion": "0.13.0.0",
"DriverDate": "2021-02-08T03:00:00+03:00"
}
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/software | jq .[-2]
{
"Name": "ILSpy",
"Version": "8.0.0.7345",
"Vendor": "ICSharpCode Team",
"InstallDate": "16.10.2023",
"InstallLocation": null,
"InstallSource": "D:\\Install\\IDE\\.NET\\",
"PackageName": "ILSpy-8.0.0.7345.msi",
"LocalPackage": "C:\\Windows\\Installer\\21787.msi"
}
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/update | jq .[0]
{
"HotFixID": "KB5033918",
"InstallDate": "13.01.2024",
"Description": "Update",
"InstalledBy": "NT AUTHORITY\\Π‘ΠΠ‘Π’ΠΠΠ"
}
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/files -H "Path: D:/Movies"
[
{
"Name": "ΠΠΠ-03",
"FullName": "D:\\Movies\\ΠΠΠ-03",
"Type": "Directory",
"Size": "14.243 GB",
"Files": 9,
"Directory": 0,
"CreationTime": "25.10.2023 03:58:41",
"LastAccessTime": "02.02.2024 02:45:19",
"LastWriteTime": "25.10.2023 04:05:22"
},
{
"Name": "Adventure-Time",
"FullName": "D:\\Movies\\Adventure-Time",
"Type": "Directory",
"Size": "61.73 GB",
"Files": 292,
"Directory": 11,
"CreationTime": "04.05.2023 10:05:23",
"LastAccessTime": "02.02.2024 02:45:19",
"LastWriteTime": "04.05.2023 10:06:22"
},
{
"Name": "Prikluchenie-Dsheki-Chana",
"FullName": "D:\\Movies\\Prikluchenie-Dsheki-Chana",
"Type": "Directory",
"Size": "22.862 GB",
"Files": 95,
"Directory": 0,
"CreationTime": "10.07.2023 10:00:55",
"LastAccessTime": "02.02.2024 02:45:19",
"LastWriteTime": "10.07.2023 10:03:28"
},
{
"Name": "Shaman-King",
"FullName": "D:\\Movies\\Shaman-King",
"Type": "Directory",
"Size": "15.123 GB",
"Files": 64,
"Directory": 0,
"CreationTime": "10.07.2023 10:03:10",
"LastAccessTime": "02.02.2024 02:45:19",
"LastWriteTime": "10.07.2023 10:07:01"
},
{
"Name": "The-Cleaner-S02",
"FullName": "D:\\Movies\\The-Cleaner-S02",
"Type": "Directory",
"Size": "7.829 GB",
"Files": 6,
"Directory": 0,
"CreationTime": "25.10.2023 03:47:32",
"LastAccessTime": "02.02.2024 02:45:19",
"LastWriteTime": "25.10.2023 03:51:10"
},
{
"Name": "The-Flash",
"FullName": "D:\\Movies\\The-Flash",
"Type": "Directory",
"Size": "76.569 GB",
"Files": 43,
"Directory": 2,
"CreationTime": "30.07.2023 01:13:20",
"LastAccessTime": "02.02.2024 02:45:06",
"LastWriteTime": "30.07.2023 03:22:09"
}
]
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/files -H "Path: D:/Movies/The-Flash"
There are 20 files in the season 4 directory:
[
{
"Name": "3 sezon",
"FullName": "D:\\Movies\\The-Flash\\3 sezon",
"Type": "Directory",
"Size": "41.01 GB",
"Files": 23,
"Directory": 0,
"CreationTime": "30.07.2023 01:13:20",
"LastAccessTime": "02.02.2024 02:08:32",
"LastWriteTime": "30.07.2023 01:14:37"
},
{
"Name": "4 sezon",
"FullName": "D:\\Movies\\The-Flash\\4 sezon",
"Type": "Directory",
"Size": "35.559 GB",
"Files": 20,
"Directory": 0,
"CreationTime": "30.07.2023 01:22:15",
"LastAccessTime": "02.02.2024 02:08:32",
"LastWriteTime": "18.12.2023 12:00:37"
}
]
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/files -H "Path: D:/Movies/The-Flash/4 sezon/The.Flash.S04E20.1080p.rus.LostFilm.TV.mkv"
{
"Name": "The.Flash.S04E20.1080p.rus.LostFilm.TV.mkv",
"FullName": "D:\\Movies\\The-Flash\\4 sezon\\The.Flash.S04E20.1080p.rus.LostFilm.TV.mkv",
"Type": "File",
"Size": "1.786 GB",
"Files": 0,
"Directory": 0,
"CreationTime": "30.07.2023 03:06:02",
"LastAccessTime": "17.12.2023 11:45:02",
"LastWriteTime": "30.07.2023 03:07:19"
}
β We're deleting episode 20 of the serial:
curl -s -X POST -u $user:$pass -data '' http://192.168.3.99:8443/api/file-delete -H "Path: D:/Movies/The-Flash/4 sezon/The.Flash.S04E20.1080p.rus.LostFilm.TV.mkv"
Deleted successfully: D:/Movies/The-Flash/4 sezon/The.Flash.S04E20.1080p.rus.LostFilm.TV.mkv (File).
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/files -H "Path: D:/Movies/The-Flash/4 sezon/The.Flash.S04E20.1080p.rus.LostFilm.TV.mkv"
Bad Request. Path could not be found.
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/files -H "Path: D:/Movies/The-Flash"
There are now 19 files in the Season 4 catalog:
[
{
"Name": "3 sezon",
"FullName": "D:\\Movies\\The-Flash\\3 sezon",
"Type": "Directory",
"Size": "41.01 GB",
"Files": 23,
"Directory": 0,
"CreationTime": "30.07.2023 01:13:20",
"LastAccessTime": "02.02.2024 02:45:06",
"LastWriteTime": "30.07.2023 01:14:37"
},
{
"Name": "4 sezon",
"FullName": "D:\\Movies\\The-Flash\\4 sezon",
"Type": "Directory",
"Size": "33.773 GB",
"Files": 19,
"Directory": 0,
"CreationTime": "30.07.2023 01:22:15",
"LastAccessTime": "02.02.2024 02:45:06",
"LastWriteTime": "18.12.2023 12:00:37"
}
]
Example of logging different clients: Google Chrome
, PowerShell (Invoke-RestMethod)
and curl
.
PS C:\Users\lifailon\Documents\Git\WinAPI> . 'C:\Users\lifailon\Documents\Git\WinAPI\WinAPI\WinAPI-0.3.ps1'
Running on port 8443
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/service => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/process => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET / => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /service => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => POST /api/service/WinRM => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /service => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => POST /api/service/WinRM => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /service => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /process => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => POST /api/process/qbittorrent => 200
192.168.3.99:49829 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => POST /api/process/ => 405
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /process => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => POST /api/process/qbittorrent => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /process => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/hardware => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/performance => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/performance => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/cpu => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/cpu => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/cpu => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/cpu => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/cpu => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/memory => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/memory => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/memory => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/memory => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/disk/physical => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/disk/logical => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/disk/iops => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/disk/iops => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/disk/iops => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/disk/iops => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/disk/iops => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/video => 200
192.168.3.100:55137 Mozilla/5.0 (Windows NT 10.0; Microsoft Windows 10.0.19045; ru-RU) PowerShell/7.3.7 => GET /api/service => 200
192.168.3.100:55147 Mozilla/5.0 (Windows NT 10.0; Microsoft Windows 10.0.19045; ru-RU) PowerShell/7.3.7 => POST /api/service/winrm => 200
192.168.3.100:55152 Mozilla/5.0 (Windows NT 10.0; Microsoft Windows 10.0.19045; ru-RU) PowerShell/7.3.7 => POST /api/service/winrm => 200
192.168.3.100:55175 Mozilla/5.0 (Windows NT 10.0; Microsoft Windows 10.0.19045; ru-RU) PowerShell/7.3.7 => GET /api/service => 200
192.168.3.100:55181 Mozilla/5.0 (Windows NT 10.0; Microsoft Windows 10.0.19045; ru-RU) PowerShell/7.3.7 => POST /api/service/winrm => 200
192.168.3.101:44112 curl/7.81.0 => GET /api/service/win => 200
192.168.3.101:44120 curl/7.81.0 => GET /api/service/winrm => 200
192.168.3.101:39642 curl/7.81.0 => POST /api/process/qbittorrent => 200
192.168.3.101:46296 curl/7.81.0 => POST /api/process/qbittorrent => 200