Hello! I would like to know how to use /cgi-bin on a website becuase i have found an exploit on a site, but i do not know how to use it. Please help me!

You upload your CGI's to your CGI-bin directory and point your forms to it to the CGI.

You do not have permission to use the wEbsites CGI-bin you only have your's to use.



What exactly are you trying to do?

ok,

Check what the server is running on, if it's apache then cool.

so to use the cgi-bin stuff you have to look into the url code to see something like these page.pl or cgi?something.htm or anyother extention so to exploit these stuff you can try cgi-bin/page.pl or cgi?page.pl or cgi these will show you the cgi or pl code so you can go on with other exploits

go to apple.com/cgi, I got #!/usr/bin/perl

use strict;

########## Required Perl Module for Parsing Form Values ##########

use CGI qw(:standard);



########## Required Global Variable Declarations ##########

my %FORM_DATA;



########## Main logic happens here ##########

my $token_string = PARSE_FORM_VALUES();

DISPLAY_PAGE($token_string);

exit;



########## Subroutines begin here ##########

sub PARSE_FORM_VALUES

{

my $token_string;

my $query = new CGI;

my @form_elements = $query->param;

foreach my $element_name (@form_elements)

{

my $form_data = ($query->param($element_name));

$form_data =~ s/\"//g;

$FORM_DATA{$element_name} = $form_data;

if ($FORM_DATA{$element_name} eq "")

{

delete $FORM_DATA{$element_name};

}

else

{

$token_string = $token_string."&".$element_name."=".$FORM_DATA{$element_name};

}

}

return $token_string;

}

exit;

sub DISPLAY_PAGE

{

my $token_string = $_[0];

print qq~

<HTML>

<HEAD>

<TITLE>The Apple Store</TITLE>

</HEAD>

<BODY BGCOLOR="FFFFFF" LINK="#666699" VLINK="#666666">

<CENTER>

<BR><BR><BR><BR>

<TABLE BORDER=0 WIDTH=576 CELLPADDING=0 CELLSPACING=0>

<TR VALIGN=TOP>

<TD WIDTH=405 ALIGN=CENTER>

<IMG SRC="http://store.apple.com/Catalog/US/Images/edu_routing_applestorelogo.gif" ALT="Apple Store" BORDER=0 WIDTH=235 HEIGHT=55><BR><BR>



<IMG SRC="http://store.apple.com/Catalog/US/Images/edtitlewelcome.gif" WIDTH=405 HEIGHT=50 ALT="The Apple Store for Education offers powerful desktop portable computer solutions at special prices."><BR><BR>



<TABLE BORDER=0 WIDTH=405 CELLPADDING=0 CELLSPACING=0>

<TR VALIGN=TOP>

<TD WIDTH=195>

<FONT SIZE="1" FACE="Geneva,Arial,Helvetica,Swiss,SunSans-Regular">

<IMG SRC="http://store.apple.com/Catalog/US/Images/edtextshopschool.gif" WIDTH=132 HEIGHT=20 ALT="Shop For Your School"><BR>

Choose one of these options if you are selecting items to be purchased by your institution:<BR><BR>



<A HREF="http://store.apple.com/1-800-800-APPL/WebObjects/K12"><IMG SRC="http://store.apple.com/Catalog/US/Images/edlink1.gif" WIDTH="182" HEIGHT="17" BORDER=0></A><BR>

<A HREF="http://store.apple.com/1-800-800-APPL/WebObjects/HED"><IMG SRC="http://store.apple.com/Catalog/US/Images/edlink2.gif" WIDTH="182" HEIGHT="17" BORDER=0></A><BR><BR>



Choose one of these options if you are a registered purchasing agent for your institution:<BR><BR>



<A HREF="https://store.apple.com/1-800-800-APPL/WebObjects/K12?authenticate=yes"><IMG SRC="http://store.apple.com/Catalog/US/Images/edlink3.gif" WIDTH="182" HEIGHT="17" BORDER=0></A><BR>

<A HREF="https://store.apple.com/1-800-800-APPL/WebObjects/HED?authenticate=yes"><IMG SRC="http://store.apple.com/Catalog/US/Images/edlink4.gif" WIDTH="182" HEIGHT="30" BORDER=0></A><BR>



<BR><BR><BR><BR><BR>



<A HREF="http://store.apple.com/1-800-MY-APPLE/WebObjects/AppleStore"><IMG SRC="http://store.apple.com/Catalog/US/Images/edlink7.gif" WIDTH="170" HEIGHT="14" BORDER="0"></A><BR>

</FONT>

</TD>

<TD WIDTH=15><IMG SRC="http://store.apple.com/Catalog/US/Images/spacer.gif" WIDTH=15 HEIGHT=1></TD>

<TD WIDTH=195>

<FONT SIZE="1" FACE="Geneva,Arial,Helvetica,Swiss,SunSans-Regular">

<IMG SRC="http://store.apple.com/Catalog/US/Images/edtextshopyourself.gif" WIDTH=109 HEIGHT=20 ALT="Shop For Yourself"><BR>

Choose one of these options if you are making a personal purchase and wish to take advantage of Apple**146;s educational discounts:<BR><BR>



<A HREF="http://store.apple.com/1-800-780-5009/WebObjects/EducationIndividual?type=k12$token_string"><IMG SRC="http://store.apple.com/Catalog/US/Images/edlink5.gif" WIDTH="182" HEIGHT="17" BORDER=0></A><BR>

<A HREF="http://store.apple.com/1-800-780-5009/WebObjects/EducationIndividual?type=higherEd$token_string"><IMG SRC="http://store.apple.com/Catalog/US/Images/edlink6.gif" WIDTH="178" HEIGHT="30" BORDER=0></A><BR><BR>



Find out about <A HREF="http://www.apple.com/education/k12/homeschool">Homeschool</A> pricing.<BR><BR>



<IMG SRC="http://store.apple.com/Catalog/US/Images/edu_routing_imac.jpg" ALT="iMac" WIDTH=135 HEIGHT=136><BR>

</FONT>

</TD>

</TR>

</TABLE>

</TD>

<TD WIDTH=10><IMG SRC="http://store.apple.com/Catalog/US/Images/spacer.gif" WIDTH=10 HEIGHT=1></TD>

<TD WIDTH=1 BGCOLOR=#EEEEEE><IMG SRC="http://store.apple.com/Catalog/US/Images/spacer.gif" WIDTH=1 HEIGHT=1></TD>

<TD WIDTH=10><IMG SRC="http://store.apple.com/Catalog/US/Images/spacer.gif" WIDTH=10 HEIGHT=1></TD>

<TD WIDTH=150 VALIGN=MIDDLE>

<IMG SRC="http://store.apple.com/Catalog/US/Images/edu_routing_ibook.jpg" ALT="iBook" WIDTH=150 HEIGHT=125 BORDER=0><BR><BR>

<IMG SRC="http://store.apple.com/Catalog/US/Images/edu_routing_ibookquote.gif" ALT="ÒThe iBook is going to change education in terms of how we teach and learn. Mark Edwards, Superintendent, Henrico County Public Schools, Richmond, Virginia" WIDTH=150 HEIGHT=215 BORDER=0><BR>

</TD>

</TR>

</TABLE>

</CENTER>

</BODY>

</HTML>

~;

}

exit;

Help? what to do from there.

Your too stupid to exploit a sites CGI script if you have to ask.

where is the exploit in that?

quote:Originally posted by jamez:

where is the exploit in that?

Theres not, this bitch boy nigger doesn't even know what the fuck he's talking about.

Nice HTML body you got there son.

^^ i agree-- you have a big long source-- man i have posted this too much-- unix in the URL

<!--#exec cmd="ls/..../"-->

^ figure out the point i point to on your own-- if you know how to combine cgi w/this it will display the password---- 057