/cgi-bin/dbmlparser.exetestcgi $1 /cgi-bin/dig.cgitestcgi $1 /cgi-bin/dnewswebtestcgi $1 /cgi-bin/edit.pltestcgi $1 /cgi-bin/environ.cgitestcgi $1 /cgi-bin/excitetestcgi $1 /cgi-bin/faxsurveytestcgi $1 /cgi-bin/filemail.pltestcgi $1 /cgi-bin/files.pltestcgi $1 /cgi-bin/fingertestcgi $1 /cgi-bin/finger.pltestcgi $1 /cgi-bin/formmail.pltestcgi $1 /cgi-bin/fpcount.exetestcgi $1 /cgi-bin/fpexplore.exetestcgi $1 /cgi-bin/gH.cgitestcgi $1 /cgi-bin/get32.exetestcgi $1 /cgi-bin/glimpsetestcgi $1 /cgi-bin/guestbook.cgitestcgi $1 /cgi-bin/handlertestcgi $1 /cgi-bin/htimage.exetestcgi $1 /cgi-bin/htmlscripttestcgi $1 /cgi-bin/htsearchtestcgi $1 /cgi-bin/htsearchtestcgi $1 /cgi-bin/iisadmpwd/achg.htrtestcgi $1 /cgi-bin/iisadmpwd/aexp.htrtestcgi $1 /cgi-bin/iisadmpwd/aexp2.htrtestcgi $1 /cgi-bin/iisadmpwd/anot.htrtestcgi $1 /cgi-bin/imagemap.exetestcgi $1 /cgi-bin/info2wwwtestcgi $1 /cgi-bin/infosrch.cgitestcgi $1 /cgi-bin/input.battestcgi $1 /cgi-bin/input2.battestcgi $1 /cgi-bin/jjtestcgi $1 /cgi-bin/ktestcgi $1 /cgi-bin/loadpage.cgitestcgi $1 /cgi-bin/mailform.exetestcgi $1 /cgi-bin/maillist.pltestcgi $1 /cgi-bin/makechanges/easysteps/easysteps.pltestcgi $1 /cgi-bin/man.shtestcgi $1 /cgi-bin/netstattestcgi $1 /cgi-bin/nph-publishtestcgi $1 /cgi-bin/nph-test-cgitestcgi $1 /cgi-bin/passwdtestcgi $1 /cgi-bin/passwd.txttestcgi $1 /cgi-bin/perl.exetestcgi $1 /cgi-bin/perlshop.cgitestcgi $1 /cgi-bin/pfdispaly.cgitestcgi $1 /cgi-bin/pfdisplaytestcgi $1 /cgi-bin/pfdisplay.cgitestcgi $1 /cgi-bin/phftestcgi $1 /cgi-bin/php.cgitestcgi $1 /cgi-bin/plusmailtestcgi $1 /cgi-bin/postcard.pltestcgi $1 /cgi-bin/printenvtestcgi $1 /cgi-bin/process_bug.cgitestcgi $1 /cgi-bin/querytestcgi $1 /cgi-bin/respondertestcgi $1 /cgi-bin/rguest.exetestcgi $1 /cgi-bin/rpm_querytestcgi $1 /cgi-bin/rwwwshell.pltestcgi $1 /cgi-bin/search.cgitestcgi $1 /cgi-bin/settings.cfgtestcgi $1 /cgi-bin/sojourntestcgi $1 /cgi-bin/survey.cgitestcgi $1 /cgi-bin/test-cgitestcgi $1 /cgi-bin/test.battestcgi $1 /cgi-bin/textcounter.pltestcgi $1 /cgi-bin/tpgnrocktestcgi $1 /cgi-bin/tst.battestcgi $1 /cgi-bin/tst.battestcgi $1 /cgi-bin/unlg1.1testcgi $1 /cgi-bin/unlg1.2testcgi $1 /cgi-bin/userfile.dattestcgi $1 /cgi-bin/view-sourcetestcgi $1 /cgi-bin/visadmin.exetestcgi $1 /cgi-bin/w3-msql/testcgi $1 /cgi-bin/webbbs.cgitestcgi $1 /cgi-bin/webdist.cgitestcgi $1 /cgi-bin/webplustestcgi $1 /cgi-bin/websendmailtestcgi $1 /cgi-bin/webwho.pltestcgi $1 /cgi-bin/wguest.exetestcgi $1 /cgi-bin/whois_raw.cgitestcgi $1 /cgi-bin/windmail.exetestcgi $1 /cgi-bin/wraptestcgi $1 /cgi-bin/www-sqltestcgi $1 /cgi-bin/wwwadmin.pltestcgi $1 /cgi-bin/wwwboard.pltestcgi $1 /cgi-dos/args.battestcgi $1 /cgi-dos/args.cmdtestcgi $1 /cgi-localtestcgi $1 /cgi-shl/win-c-sample.exetestcgi $1 /cgi-srctestcgi $1 /cgi-src/phf.ctestcgi $1 /cgi-wintestcgi $1 /cgi-win/uploader.exetestcgi $1 /cgibintestcgi $1 /com1testcgi $1 /com2testcgi $1 /com3testcgi $1 /com4testcgi $1 /con/contestcgi $1 /config/checks.txttestcgi $1 /config/import.txttestcgi $1 /config/mountain.cfgtestcgi $1 /config/orders.txttestcgi $1 /default.asp.testcgi $1 /default.asp::$DATAtestcgi $1 /doctestcgi $1 /iisadmpwd/aexp2.htrtestcgi $1 /iishelp/iis/misc/iirturnh.htwtestcgi $1 /iissamples/exair/howitworks/codebrws.asptestcgi $1 /iissamples/exair/search/advsearch.asptestcgi $1 /iissamples/exair/search/qfullhit.htwtestcgi $1 /iissamples/exair/search/qsumrhit.htwtestcgi $1 /iissamples/iissamples/query.asptestcgi $1 /iissamples/issamples/oop/qfullhit.htwtestcgi $1 /iissamples/issamples/oop/qsumrhit.htwtestcgi $1 /iissamples/sdk/asp/docs/codebrws.asptestcgi $1 /logtestcgi $1 /logstestcgi $1 /mall_log_files/order.logtestcgi $1 /manage/cgi/cgiproctestcgi $1 /msadc/Samples/SELECTOR/showcode.asptestcgi $1 /msadc/msadcs.dlltestcgi $1 /msads/Samples/SELECTOR/showcode.asptestcgi $1 /ncl_items.htmltestcgi $1 /order/order.logtestcgi $1 /orders/checks.txttestcgi $1 /orders/import.txttestcgi $1 /orders/mountain.cfgtestcgi $1 /orders/order.logtestcgi $1 /orders/orders.txttestcgi $1 /ping alltestcgi $1 /ping?SomeCrapHeretestcgi $1 /piranha/secure/passwd.php3testcgi $1 /pw/storemgr.pwtestcgi $1 /quikstore.cfgtestcgi $1 /samples/search/queryhit.htmtestcgi $1 /scriptstestcgi $1 /scripts/CGImail.exetestcgi $1 /scripts/c32web.exe/ChangeAdminPasswordtestcgi $1 /scripts/cart32.exe/cart32clientlisttestcgi $1 /scripts/cmd.exetestcgi $1 /scripts/convert.bastestcgi $1 /scripts/counter.exetestcgi $1 /scripts/dbman/db.cgi?db=invalid-dbtestcgi $1 /scripts/emurl/RECMAN.dlltestcgi $1 /scripts/fpcount.exetestcgi $1 /scripts/iisadmin/ism.dll?http/dirtestcgi $1 /scripts/issadmin/bdir.htrtestcgi $1 /scripts/no-such-file.pltestcgi $1 /scripts/proxy/w3proxy.dlltestcgi $1 /scripts/slxweb.dlltestcgi $1 /scripts/tools/mkilog.exetestcgi $1 /scripts/tools/newdsn.exetestcgi $1 /scripts/uploadn.asptestcgi $1 /scripts/wa.exetestcgi $1 /scripts/webbbs.exetestcgi $1 /scripts/wsisa.dlltestcgi $1 /search97.vtstestcgi $1 /server-statustestcgi $1 /showfile.asptestcgi $1 /ssi/envout.battestcgi $1 /ws_ftp.initestcgi $1 /~testcgi $1 /~bintestcgi $1 /~guesttestcgi $1 /~logtestcgi $1 /~logstestcgi $1 /~lptestcgi $1 /~namedtestcgi $1 /~roottestcgi $1 /~testtestcgi $1 /~tmp-------------------------- cgichk.sh -----------------------------2.4. - Furos em HTML---------------------Se os CGIs sao um problema serio, os Furos em HTML conseguem ser aindapiores.Ma implementacao de paginas WEB pode significar um serio riscoa seguranca de uma rede, no entanto, como isto e uma pratica comum deusuarios leigos, um dominio que serve paginas para muitas pessoas pode serum alvo em potencial.* Problemas com SSI:SSI refere-se a Server Side Includes(Inclusoes do Lado do Servidor).E um esquema para uso na WEB que fornece um mecanismo de funcionalidadeinterativa de tempo real sem programacao.Ele e usado por exemplo paraobter a data/hora do sistema ou para executar um comando local e avaliara resposta a fim de tomar uma decisao de fluxo de programa.Sao varios os recursos SSI, inclusive, echo,include,fsize,flastmod,exec,config,odbc,email,if,goto,label e break. Dois comandos destes sao de maiorinteresse que e, exec e email. Tambem abordarei os SSI num outro artigo, masse voce quer ir adiantando, no link abaixo voce pode ver mais coisassobre isto:http://www.absoluta.org/cgi/cgi_ssi.htm* Problemas com Marcas Hidden:Marcas Hidden sao usadas para ocultar determinados