What Happens On The Internet?

There’s nothing new about this, but it’s still kinda fun to see. I have a small web server that runs as a console app. It’s exposed to the Internet, and so I see the requests being made in real time. It’s fun.

Here’s what happened overnight on my little server. These requests are probably hitting every single IP that is exposed to the internet.

/gYtCpcFPGVTJJ
/GYtCpcFPGVTJJ
/YtCpcFPGVTJJ/YtCpcFPGVTJJ/YtCpcFPGVTJJ
/.ssh/config
/.ssh/id_dsa
/.ssh/id_rsa.pub
/.env/
/.ssh/
/.ssh/known_hosts
/.ssh/authorized_keys
/.ssh/identity
/.ssh/id_dsa.pub
/.ssh/id_rsa
/.ssh/id_dss
/.ssh/id_dss.pub
/.ssh/id_ecdsa
/.ssh/id_ecdsa.pub
/.ssh/id_ed25519
/.ssh/id_ed25519.pub
/.mysql_history
/.sqlite_history
/.psql_history
/.sh_history
/.bash_history
/.profile
/phpinfo.php
/.bashrc
/wallet.dat
/.php_cs.cache
/server.key
/key.pem
/myserver.key
/privatekey.key
/.git/
/.git/config
/phpinfo.php3
/.git/HEAD
/.svn/
/.svn/entries
/.idea/WebServers.xml
/config/databases.yml
/config/database.yml
/test.conf
/svnserve.conf
/globals_double_quotes.conf
/test.php
/globals_single_quotes.conf
/httpd.conf
/local.conf
/httpd-vhosts.conf
/tidy.conf
/lighttpd.conf
/.httpd.conf
/doxygen.conf
/en.conf
/info.php
/nginx.conf
/example.conf
/apache.conf
/phpMyAdmin-http.conf
/application.conf
/fsfs.conf
/blacklist.conf
/site.conf
/modules.conf
/index.php
/smarty.conf
/php-fpm.conf
/proftpd.conf
/smb.conf
/interwiki.conf
/Module.conf
/app.config
/Web.config
/web.xml
/php_info.php
/nunit-console.exe.config
/NAnt.exe.config
/nunit-console-x86.exe.config
/NUnitTests.config
/nunit.exe.config
/nunit-x86.exe.config
/runFile.exe.config
/Log4Net.config
/NCover.Console.exe.config
/test/phpinfo.php
/ConsoleExample.config
/NCoverExplorer.exe.config
/MbUnit.Cons.exe.config
/MbUnit.GUI.exe.config
/nunit-agent.exe.config
/xunit.console.exe.config
/NHibernate.config
/Windsor.config
/FxCopCmd.exe.config
/test/phpinfo.php3
/mock-assembly.dll.config
/nunit-gui.exe.config
/ccnet.config
/dashboard.config
/NDepend.Console.exe.config
/StructureMap.config
/default.config
/NHibernate.Examples.dll.config
/NHibernate.Test.Performance.dll.config
/test/test.php
/NLog.config
/NHibernate.Test.dll.config
/Gallio.Ambience.Server.exe.config
/Gallio.Echo.exe.config
/Gallio.Host.exe.config
/Gallio.Host.x86.exe.config
/Gallio.Icarus.exe.config
/Gallio.Navigator.exe.config
/castle.config
/test/info.php
/NHibernate.Caches.SysCache.Tests.dll.config
/site.config
/html2ps.config
/candle.exe.config
/light.exe.config
/Cassini.exe.config
/facilities.config
/services.config
/Dv_NewsSetting.config
/test/index.php
/Temp_Dv_ForumNews.config
/Sysindex.config
/System.config
/usercat.config
/Windsor-AR.config
/NHQG.exe.config
/conceptual.config
/sandcastle-scbuild.config
/sandcastle-webref.config
/test/php_info.php
/sandcastle.config
/audit.config
/StateNameServer.exe.config
/SQLiteInMemory.Nhibernate.config
/MRefBuilder.config
/xamlSyntax.config
/WebSite.config
/Rhino.Commons.NHibernate.dll.config
/config.ini
/php.ini
/properties.ini
/propel.ini
/desktop.ini
/settings.ini
/info.ini
/version.ini
/phpdoc.ini
/app.ini
/application.ini
/example.ini
/en.ini
/my.ini
/default.ini
/routes.ini
/error.ini
/httpd.ini
/Picasa.ini
/test.ini
/database.ini
/en-GB.ini
/project.ini
/users.ini
/admin.ini
/auth.ini
/boot.ini
/krumo.ini
/options.ini
/BBCodeParser.ini
/phpDocumentor.ini
/blog.ini
/modules.ini
/setup.ini
/project.properties
/http.ini
/build.properties
/private.properties
/config.properties
/default.properties
/log4j.properties
/defaults.properties
/genfiles.properties
/test.properties
/dphp-adodb.properties
/dphp-logging.properties
/dphp-mls.properties
/dphp-template.properties
/logging.properties
/lang.properties
/dzit.properties
/build.rss.properties
/app.properties
/server.properties
/ESAPI.properties
/preferences.properties
/apps.properties
/CatalogManager.properties
/jdbc.properties
/mail.properties
/version.properties
/xwork-conversion.properties
/console.properties
/Application.properties
/override.properties
/Wizard.properties
/WS_FTP.ini
/WS_FTP.INI
/ws_ftp.ini
/WS_FTP.INI
/sftp-config.json
/filezilla.xml
/sitemanager.xml
/FileZilla.xml
/winscp.ini
/WinSCP.ini
/.DS_Store
/app/etc/local.xml
/.htaccess
/example.htaccess
/_.htaccess
/sample.htaccess
/a.htaccess
/htaccess_for_page_not_found_redirects.htaccess
/.htpasswd
/1.sql
/adodb-sessions.mysql.sql
/adodb-sessions.oracle.clob.sql
/adodb-sessions.oracle.sql
/install.sql
/schema.sql
/mysql.sql
/adodb-sessions.mysql.sql
/adodb-sessions.oracle.clob.sql
/adodb-sessions.oracle.sql
/database.sql
/sessions.sql
/tables.sql
/db_acl.sql
/db.sql
/dbdump.sql
/backup.sql
/db_backup.sql
/i18n.sql
/create.sql
/data.sql
/pgsql.sql
/create_tables.sql
/dump.sql
/users.sql
/update.sql
/test.sql
/sql.sql
/lib.model.schema.sql
/setup.sql
/drop.sql
/mysql_schema.sql
/upgrade.sql
/structure.sql
/mssql_schema.sql
/mysql_basic.sql
/backup.sql
/site.sql
/localhost.sql
/mysqldump.sql
/data.mdb
/db.mdb
/test.mdb
/DvSQLLOG.mdb
/IPaddress.mdb
/Dvboke.mdb
/db1.mdb
/database.mdb
/Database.mdf
/BookStore.mdf
/DB.mdf
/admin.db
/cgi.cgi/horde/test.php
/horde/test.php
/imp/horde/test.php
/index.html~
/index.html.bak
/cgi.cgi/gH.cgi
/cartcart.cgi
/readme.eml
/scripts/httpodbc.dll
/view_source.jsp
/webcgi/horde/test.php
/WEB-INF/web.xml
/newuser
/webamil/test.php
/trace.axd
/webcgi/gH.cgi
/./
/smg_Smxcfg30.exe
/nsn/..%5Cutil/attrib.bas
/nsn/..%5Cutil/chkvol.bas
/cgi-914/horde/test.php
/nsn/..%5Cutil/copy.bas
/nsn/..%5Cutil/del.bas
/nsn/..%5Cutil/dir.bas
/nsn/..%5Cutil/dsbrowse.bas
/cgi-914/gH.cgi
/nsn/..%5Cutil/glist.bas
/nsn/..%5Cutil/lancard.bas
/nsn/..%5Cutil/md.bas
/nsn/..%5Cutil/rd.bas
/cgi-915/horde/test.php
/nsn/..%5Cutil/ren.bas
/nsn/..%5Cutil/send.bas
/nsn/..%5Cutil/set.bas
/nsn/..%5Cutil/slist.bas
/cgi-915/gH.cgi
/nsn/..%5Cutil/type.bas
/nsn/..%5Cutil/userlist.bas
/nsn/..%5Cweb/env.bas
/nsn/..%5Cweb/fdir.bas
/bin/horde/test.php
/nsn/..%5Cwebdemo/env.bas
/nsn/..%5Cwebdemo/fdir.bas
/webtop/wdk/
//
/bin/gH.cgi
/SilverStream
/upd/
/examples/jsp/source.jsp
/cfcache.map
/cgi/horde/test.php
/cfdocs/cfcache.map
/3rdparty/phpMyAdmin/db_details_importdocsql.php
/asp/sqlqhit.asp
/asp/SQLQHit.asp
/cgi/gH.cgi
/iissamples/issamples/sqlqhit.asp
/iissamples/issamples/SQLQHit.asp
/ISSamples/sqlqhit.asp
/ISSamples/SQLQHit.asp
/mpcgi/horde/test.php
/oc/Search/sqlqhit.asp
/phpMyAdmin/db_details_importdocsql.php
/oc/Search/SQLQHit.asp
/search/htx/sqlqhit.asp
/mpcgi/gH.cgi
/search/htx/SQLQHit.asp
/search/sqlqhit.asp
/search/SQLQHit.asp
/sqlqhit.asp
/cgi-bin/horde/test.php
/SQLQHit.asp
/3rdparty/phpmyadmin/db_details_importdocsql.php
/cgi.cgi/test-cgi.tcl
/cgi.cgi/test-env
/cgi-bin/gH.cgi
/*.*
/%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd
/ows-bin/horde/test.php
/.nsf/../winnt/win.ini
/phpmyadmin/db_details_importdocsql.php
/webcgi/test-cgi.tcl
/webcgi/test-env
/ows-bin/gH.cgi
/prxdocs/misc/prxrch.idq
/query.idq
/iissamples/issamples/fastq.idq
/iissamples/issamples/query.idq
/cgi-sys/horde/test.php
/………………/config.sys
/pma/db_details_importdocsql.php
/cgi-914/test-cgi.tcl
/cgi-914/test-env
/cgi-sys/gH.cgi
/netget
/%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f../boot.ini
/netget
/servlet/webacc
/cgi-local/horde/test.php
/../../../../../../../../../boot.ini
/..%5C%5C..%5C%5C..%5C%5C..%5C%5C..%5C%5C..%5C%5C..%5C%5Cboot.ini
/cgi-915/test-cgi.tcl
/cgi-915/test-env
/cgi-local/gH.cgi
////./../…/boot.ini
/.cobalt/sysManage/../admin/.htaccess
/atomicboard/index.php
/current/modules.php
/htbin/horde/test.php
/current/index.php
/DomainFiles/*//../../../../../../../../../../etc/passwd
/bin/test-cgi.tcl
/bin/test-env
/htbin/gH.cgi
/index.php
/index.php
/index.php
/index.php
/cgibin/horde/test.php
/jsp/jspsamp/jspexamples/viewsource.jsp
/jsp/jspsamp/jspexamples/viewsource.jsp
/cgi/test-cgi.tcl
/cgi/test-env
/cgibin/gH.cgi
/k/home
/nph-showlogs.pl
/nph-showlogs.pl
/phprocketaddin/
/cgis/horde/test.php
/phpwebfilemgr/index.php
/phpwebfilemgr/index.php
/mpcgi/test-cgi.tcl
/mpcgi/test-env
/cgis/gH.cgi
/put/cgi-bin/putport.exe
/ROADS/cgi-bin/search.pl
/support/common.php
/Web_Store/web_store.cgi
/scripts/horde/test.php
/webMathematica/MSP
/cgi.cgi/admin.cgi
/cgi-bin/test-cgi.tcl
/cgi-bin/test-env
/scripts/gH.cgi
/cgi.cgi/14all.cgi
/cgi.cgi/14all-1.1.cgi
/cgi.cgi/anacondaclip.pl
/cgi.cgi/auktion.cgi
/cgi-win/horde/test.php
/cgi.cgi/bb-hostsvc.sh
/webcgi/admin.cgi
/ows-bin/test-cgi.tcl
/ows-bin/test-env
/cgi-win/gH.cgi
/webcgi/14all.cgi
/webcgi/14all-1.1.cgi
/webcgi/anacondaclip.pl
/webcgi/auktion.cgi
/fcgi-bin/horde/test.php
/webcgi/bb-hostsvc.sh
/cgi-914/admin.cgi
/cgi-sys/test-cgi.tcl
/cgi-sys/test-env
/fcgi-bin/gH.cgi
/cgi-914/14all.cgi
/cgi-914/14all-1.1.cgi
/cgi-914/anacondaclip.pl
/cgi-914/auktion.cgi
/cgi-exe/horde/test.php
/cgi-914/bb-hostsvc.sh
/cgi-915/admin.cgi
/cgi-local/test-cgi.tcl
/cgi-local/test-env
/cgi-exe/gH.cgi
/cgi-915/anacondaclip.pl
/cgi-915/14all.cgi
/cgi-915/14all-1.1.cgi
/cgi-915/auktion.cgi
/cgi-home/horde/test.php
/cgi-915/bb-hostsvc.sh
/bin/admin.cgi
/htbin/test-cgi.tcl
/cgi-home/gH.cgi
/htbin/test-env
/bin/anacondaclip.pl
/bin/14all-1.1.cgi
/bin/14all.cgi
/bin/auktion.cgi
/cgi-perl/horde/test.php
/bin/bb-hostsvc.sh
/cgi/admin.cgi
/cgibin/test-cgi.tcl
/cgi-perl/gH.cgi
/cgibin/test-env
/cgi/anacondaclip.pl
/cgi/14all-1.1.cgi
/cgi/14all.cgi
/scgi-bin/horde/test.php
/cgi/auktion.cgi
/cgi/bb-hostsvc.sh
/mpcgi/admin.cgi
/cgis/test-cgi.tcl
/scgi-bin/gH.cgi
/cgis/test-env
/mpcgi/anacondaclip.pl
/mpcgi/14all-1.1.cgi
/mpcgi/14all.cgi
/cgi-bin-sdb/horde/test.php
/mpcgi/auktion.cgi
/mpcgi/bb-hostsvc.sh
/cgi-bin/admin.cgi
/scripts/test-cgi.tcl
/cgi-bin-sdb/gH.cgi
/scripts/test-env
/cgi-bin/anacondaclip.pl
/cgi-bin/14all-1.1.cgi
/cgi-bin/14all.cgi
/cgi-mod/horde/test.php
/cgi-bin/auktion.cgi
/cgi-bin/bb-hostsvc.sh
/ows-bin/admin.cgi
/cgi-win/test-cgi.tcl
/cgi-mod/gH.cgi
/cgi-win/test-env
/ows-bin/anacondaclip.pl
/ows-bin/14all-1.1.cgi
/ows-bin/14all.cgi
/cgi.cgi/bb-hist
/ows-bin/auktion.cgi
/ows-bin/bb-hostsvc.sh
/cgi-sys/admin.cgi
/fcgi-bin/test-cgi.tcl
/cgi.cgi/bb-hist.sh
/fcgi-bin/test-env
/cgi-sys/anacondaclip.pl
/cgi-sys/14all-1.1.cgi
/cgi-sys/14all.cgi
/webcgi/bb-hist
/cgi-sys/auktion.cgi
/cgi-sys/bb-hostsvc.sh
/cgi-local/admin.cgi
/cgi-exe/test-cgi.tcl
/webcgi/bb-hist.sh
/cgi-exe/test-env
/cgi-local/anacondaclip.pl
/cgi-local/14all-1.1.cgi
/cgi-local/14all.cgi
/cgi-914/bb-hist
/cgi-local/auktion.cgi
/cgi-local/bb-hostsvc.sh
/htbin/admin.cgi
/cgi-home/test-cgi.tcl
/cgi-914/bb-hist.sh
/cgi-home/test-env
/htbin/anacondaclip.pl
/htbin/14all-1.1.cgi
/htbin/14all.cgi
/cgi-915/bb-hist
/htbin/auktion.cgi
/htbin/bb-hostsvc.sh
/cgibin/admin.cgi
/cgi-915/bb-hist.sh
/cgi-perl/test-cgi.tcl
/cgi-perl/test-env
/cgibin/anacondaclip.pl
/cgibin/14all-1.1.cgi
/cgibin/14all.cgi
/bin/bb-hist
/cgibin/auktion.cgi
/cgibin/bb-hostsvc.sh
/cgis/admin.cgi
/bin/bb-hist.sh
/scgi-bin/test-cgi.tcl
/scgi-bin/test-env
/cgis/anacondaclip.pl
/cgis/14all-1.1.cgi
/cgis/14all.cgi
/cgi/bb-hist
/cgis/auktion.cgi
/scripts/admin.cgi
/cgis/bb-hostsvc.sh
/cgi/bb-hist.sh
/cgi-bin-sdb/test-cgi.tcl
/cgi-bin-sdb/test-env
/scripts/anacondaclip.pl
/scripts/14all-1.1.cgi
/scripts/14all.cgi
/mpcgi/bb-hist
/scripts/auktion.cgi
/cgi-win/admin.cgi
/scripts/bb-hostsvc.sh
/mpcgi/bb-hist.sh
/cgi-mod/test-cgi.tcl
/cgi-mod/test-env
/cgi-win/anacondaclip.pl
/cgi-win/14all-1.1.cgi
/cgi-win/14all.cgi
/cgi-bin/bb-hist
/cgi-win/auktion.cgi
/fcgi-bin/admin.cgi
/cgi-win/bb-hostsvc.sh
/cgi-bin/bb-hist.sh
/cgi.cgi/common.php
/cgi.cgi/commerce.cgi
/fcgi-bin/anacondaclip.pl
/fcgi-bin/14all-1.1.cgi
/fcgi-bin/14all.cgi
/ows-bin/bb-hist
/fcgi-bin/auktion.cgi
/cgi-exe/admin.cgi
/fcgi-bin/bb-hostsvc.sh
/ows-bin/bb-hist.sh
/webcgi/common.php
/webcgi/commerce.cgi
/cgi-exe/anacondaclip.pl
/cgi-exe/14all-1.1.cgi
/cgi-sys/bb-hist
/cgi-exe/14all.cgi
/cgi-exe/auktion.cgi
/cgi-home/admin.cgi
/cgi-exe/bb-hostsvc.sh
/cgi-914/common.php
/cgi-sys/bb-hist.sh
/cgi-914/commerce.cgi
/cgi-home/anacondaclip.pl
/cgi-home/14all-1.1.cgi
/cgi-local/bb-hist
/cgi-home/14all.cgi
/cgi-home/auktion.cgi
/cgi-perl/admin.cgi
/cgi-home/bb-hostsvc.sh
/cgi-915/common.php
/cgi-local/bb-hist.sh
/cgi-915/commerce.cgi
/cgi-perl/anacondaclip.pl
/cgi-perl/14all-1.1.cgi
/htbin/bb-hist
/cgi-perl/14all.cgi
/cgi-perl/auktion.cgi
/scgi-bin/admin.cgi
/cgi-perl/bb-hostsvc.sh
/bin/common.php
/htbin/bb-hist.sh
/bin/commerce.cgi
/scgi-bin/anacondaclip.pl
/scgi-bin/14all-1.1.cgi
/cgibin/bb-hist
/scgi-bin/14all.cgi
/scgi-bin/auktion.cgi
/scgi-bin/bb-hostsvc.sh
/cgi-bin-sdb/admin.cgi
/cgi/common.php
/cgibin/bb-hist.sh
/cgi/commerce.cgi
/cgi-bin-sdb/anacondaclip.pl
/cgi-bin-sdb/14all-1.1.cgi
/cgis/bb-hist
/cgi-bin-sdb/14all.cgi
/cgi-bin-sdb/auktion.cgi
/cgi-mod/admin.cgi
/cgi-bin-sdb/bb-hostsvc.sh
/mpcgi/common.php
/cgis/bb-hist.sh
/mpcgi/commerce.cgi
/cgi-mod/anacondaclip.pl
/cgi-mod/14all-1.1.cgi
/scripts/bb-hist
/cgi-mod/14all.cgi
/cgi-mod/auktion.cgi
/cgi.cgi/cgiforum.pl
/cgi-mod/bb-hostsvc.sh
/cgi-bin/common.php
/scripts/bb-hist.sh
/cgi-bin/commerce.cgi
/cgi.cgi/cal_make.pl
/cgi.cgi/directorypro.cgi
/cgi-win/bb-hist
/cgi.cgi/emumail/emumail.cgi
/cgi.cgi/emumail.cgi
/webcgi/cgiforum.pl
/cgi.cgi/emu/html/emumail.cgi
/ows-bin/common.php
/cgi-win/bb-hist.sh
/ows-bin/commerce.cgi
/webcgi/cal_make.pl
/webcgi/emumail/emumail.cgi
/fcgi-bin/bb-hist
/webcgi/directorypro.cgi
/webcgi/emumail.cgi
/cgi-914/cgiforum.pl
/webcgi/emu/html/emumail.cgi
/cgi-sys/common.php
/fcgi-bin/bb-hist.sh
/cgi-sys/commerce.cgi
/cgi-914/cal_make.pl
/cgi-914/emumail/emumail.cgi
/cgi-exe/bb-hist
/cgi-914/directorypro.cgi
/cgi-914/emumail.cgi
/cgi-915/cgiforum.pl
/cgi-local/common.php
/cgi-914/emu/html/emumail.cgi
/cgi-exe/bb-hist.sh
/cgi-local/commerce.cgi
/cgi-915/cal_make.pl
/cgi-915/emumail/emumail.cgi
/cgi-home/bb-hist
/cgi-915/directorypro.cgi
/cgi-915/emumail.cgi
/bin/cgiforum.pl
/htbin/common.php
/cgi-915/emu/html/emumail.cgi
/cgi-home/bb-hist.sh
/htbin/commerce.cgi
/bin/cal_make.pl
/bin/emumail/emumail.cgi
/cgi-perl/bb-hist
/bin/directorypro.cgi
/bin/emumail.cgi
/cgi/cgiforum.pl
/cgibin/common.php
/bin/emu/html/emumail.cgi
/cgi-perl/bb-hist.sh
/cgibin/commerce.cgi
/scgi-bin/bb-hist
/cgi/cal_make.pl
/cgi/emumail/emumail.cgi
/cgi/directorypro.cgi
/cgi/emumail.cgi
/mpcgi/cgiforum.pl
/cgis/common.php
/cgis/commerce.cgi
/cgi/emu/html/emumail.cgi
/scgi-bin/bb-hist.sh
/cgi-bin-sdb/bb-hist
/mpcgi/cal_make.pl
/mpcgi/emumail/emumail.cgi
/mpcgi/directorypro.cgi
/mpcgi/emumail.cgi
/cgi-bin/cgiforum.pl
/scripts/common.php
/scripts/commerce.cgi
/mpcgi/emu/html/emumail.cgi
/cgi-bin-sdb/bb-hist.sh
/cgi-mod/bb-hist
/cgi-bin/cal_make.pl
/cgi-bin/emumail/emumail.cgi
/cgi-bin/directorypro.cgi
/cgi-bin/emumail.cgi
/ows-bin/cgiforum.pl
/cgi-win/common.php
/cgi-win/commerce.cgi
/cgi-bin/emu/html/emumail.cgi
/cgi-mod/bb-hist.sh
/cgi.cgi/ezshopper/search.cgi
/ows-bin/cal_make.pl
/ows-bin/emumail/emumail.cgi
/ows-bin/directorypro.cgi
/ows-bin/emumail.cgi
/cgi-sys/cgiforum.pl
/fcgi-bin/common.php
/fcgi-bin/commerce.cgi
/ows-bin/emu/html/emumail.cgi
/cgi.cgi/generate.cgi
/cgi-sys/cal_make.pl
/webcgi/ezshopper/search.cgi
/cgi-sys/emumail/emumail.cgi
/cgi-sys/directorypro.cgi
/cgi-sys/emumail.cgi
/cgi-local/cgiforum.pl
/cgi-exe/common.php
/cgi-exe/commerce.cgi
/cgi-sys/emu/html/emumail.cgi
/webcgi/generate.cgi
/cgi-local/cal_make.pl
/cgi-914/ezshopper/search.cgi
/cgi-local/emumail/emumail.cgi
/cgi-local/directorypro.cgi
/cgi-local/emumail.cgi
/htbin/cgiforum.pl
/cgi-home/common.php
/cgi-home/commerce.cgi
/cgi-914/generate.cgi
/htbin/cal_make.pl
/cgi-local/emu/html/emumail.cgi
/cgi-915/ezshopper/search.cgi
/htbin/emumail/emumail.cgi
/htbin/directorypro.cgi
/cgi-perl/commerce.cgi
/htbin/emumail.cgi
/cgi-915/generate.cgi
/cgibin/cgiforum.pl
/cgi-perl/common.php
/htbin/emu/html/emumail.cgi
/cgibin/cal_make.pl
/bin/ezshopper/search.cgi
/cgibin/emumail/emumail.cgi
/cgibin/directorypro.cgi
/scgi-bin/commerce.cgi
/cgibin/emumail.cgi
/bin/generate.cgi
/cgis/cgiforum.pl
/scgi-bin/common.php
/cgibin/emu/html/emumail.cgi
/cgis/cal_make.pl
/cgi/ezshopper/search.cgi
/cgis/emumail/emumail.cgi
/cgis/directorypro.cgi
/cgi-bin-sdb/commerce.cgi
/cgis/emumail.cgi
/cgi/generate.cgi
/scripts/cgiforum.pl
/cgi-bin-sdb/common.php
/cgis/emu/html/emumail.cgi
/scripts/cal_make.pl
/mpcgi/ezshopper/search.cgi
/scripts/emumail/emumail.cgi
/cgi-mod/commerce.cgi
/scripts/emumail.cgi
/scripts/directorypro.cgi
/mpcgi/generate.cgi
/cgi-win/cgiforum.pl
/cgi-mod/common.php
/scripts/emu/html/emumail.cgi
/cgi-win/cal_make.pl
/cgi-bin/ezshopper/search.cgi
/cgi-win/emumail/emumail.cgi
/cgi.cgi/generate.cgi
/cgi-win/emumail.cgi
/cgi-bin/generate.cgi
/fcgi-bin/cgiforum.pl
/cgi-win/directorypro.cgi
/cgi.cgi/generate.cgi
/cgi-win/emu/html/emumail.cgi
/fcgi-bin/cal_make.pl
/fcgi-bin/emumail/emumail.cgi
/ows-bin/ezshopper/search.cgi
/webcgi/generate.cgi
/fcgi-bin/emumail.cgi
/ows-bin/generate.cgi
/cgi-exe/cgiforum.pl
/fcgi-bin/directorypro.cgi
/webcgi/generate.cgi
/fcgi-bin/emu/html/emumail.cgi
/cgi-exe/cal_make.pl
/cgi-exe/emumail/emumail.cgi
/cgi-sys/ezshopper/search.cgi
/cgi-914/generate.cgi
/cgi-exe/emumail.cgi
/cgi-sys/generate.cgi
/cgi-home/cgiforum.pl
/cgi-914/generate.cgi
/cgi-exe/directorypro.cgi
/cgi-exe/emu/html/emumail.cgi
/cgi-home/cal_make.pl
/cgi-local/ezshopper/search.cgi
/cgi-home/emumail/emumail.cgi
/cgi-915/generate.cgi
/cgi-home/emumail.cgi
/cgi-local/generate.cgi
/cgi-perl/cgiforum.pl
/cgi-home/directorypro.cgi
/cgi-915/generate.cgi
/cgi-home/emu/html/emumail.cgi
/cgi-perl/cal_make.pl
/htbin/ezshopper/search.cgi
/cgi-perl/emumail/emumail.cgi
/bin/generate.cgi
/htbin/generate.cgi
/cgi-perl/emumail.cgi
/scgi-bin/cgiforum.pl
/bin/generate.cgi
/cgi-perl/directorypro.cgi
/cgi-perl/emu/html/emumail.cgi
/scgi-bin/cal_make.pl
/cgibin/ezshopper/search.cgi
/scgi-bin/emumail/emumail.cgi
/cgi/generate.cgi
/cgibin/generate.cgi
/scgi-bin/emumail.cgi
/cgi-bin-sdb/cgiforum.pl
/scgi-bin/directorypro.cgi
/cgi/generate.cgi
/scgi-bin/emu/html/emumail.cgi
/cgi-bin-sdb/cal_make.pl
/cgis/ezshopper/search.cgi
/cgi-bin-sdb/emumail/emumail.cgi
/mpcgi/generate.cgi
/cgis/generate.cgi
/cgi-bin-sdb/emumail.cgi
/cgi-mod/cgiforum.pl
/mpcgi/generate.cgi
/cgi-bin-sdb/directorypro.cgi
/cgi-bin-sdb/emu/html/emumail.cgi
/cgi-mod/cal_make.pl
/scripts/ezshopper/search.cgi
/cgi-mod/emumail/emumail.cgi
/cgi-bin/generate.cgi
/scripts/generate.cgi
/cgi-mod/emumail.cgi
/cgi.cgi/htmlscript
/cgi-bin/generate.cgi
/cgi-mod/directorypro.cgi
/cgi-mod/emu/html/emumail.cgi
/cgi.cgi/hsx.cgi
/cgi-win/ezshopper/search.cgi
/cgi.cgi/sbcgi/sitebuilder.cgi
/ows-bin/generate.cgi
/cgi-win/generate.cgi
/cgi.cgi/mrtg.cgi
/webcgi/htmlscript
/ows-bin/generate.cgi
/cgi.cgi/mrtg.cfg
/cgi.cgi/main.cgi
/webcgi/hsx.cgi
/fcgi-bin/ezshopper/search.cgi
/webcgi/sbcgi/sitebuilder.cgi
/cgi-sys/generate.cgi
/fcgi-bin/generate.cgi
/webcgi/mrtg.cgi
/cgi-914/htmlscript
/webcgi/mrtg.cfg
/cgi-sys/generate.cgi
/webcgi/main.cgi
/cgi-914/hsx.cgi
/cgi-exe/ezshopper/search.cgi
/cgi-914/sbcgi/sitebuilder.cgi
/cgi-local/generate.cgi
/cgi-exe/generate.cgi
/cgi-914/mrtg.cgi
/cgi-915/htmlscript
/cgi-914/mrtg.cfg
/cgi-local/generate.cgi
/cgi-914/main.cgi
/cgi-915/hsx.cgi
/cgi-home/ezshopper/search.cgi
/cgi-915/sbcgi/sitebuilder.cgi
/htbin/generate.cgi
/cgi-home/generate.cgi
/cgi-915/mrtg.cgi
/bin/htmlscript
/cgi-915/mrtg.cfg
/htbin/generate.cgi
/cgi-915/main.cgi
/bin/hsx.cgi
/cgi-perl/ezshopper/search.cgi
/bin/sbcgi/sitebuilder.cgi
/cgibin/generate.cgi
/cgi-perl/generate.cgi
/bin/mrtg.cgi
/cgi/htmlscript
/bin/mrtg.cfg
/cgibin/generate.cgi
/bin/main.cgi
/cgi/hsx.cgi
/scgi-bin/ezshopper/search.cgi
/cgi/sbcgi/sitebuilder.cgi
/cgis/generate.cgi
/scgi-bin/generate.cgi
/cgi/mrtg.cgi
/mpcgi/htmlscript
/cgi/mrtg.cfg
/cgi/main.cgi
/cgis/generate.cgi
/mpcgi/hsx.cgi
/cgi-bin-sdb/ezshopper/search.cgi
/mpcgi/sbcgi/sitebuilder.cgi
/scripts/generate.cgi
/mpcgi/mrtg.cgi
/cgi-bin-sdb/generate.cgi
/cgi-bin/htmlscript
/mpcgi/mrtg.cfg
/mpcgi/main.cgi
/scripts/generate.cgi
/cgi-bin/hsx.cgi
/cgi-mod/ezshopper/search.cgi
/cgi-bin/sbcgi/sitebuilder.cgi
/cgi-win/generate.cgi
/cgi-bin/mrtg.cgi
/cgi-mod/generate.cgi
/ows-bin/htmlscript
/cgi-bin/mrtg.cfg
/cgi-bin/main.cgi
/cgi-win/generate.cgi
/ows-bin/hsx.cgi
/cgi.cgi/mail/nph-mr.cgi
/ows-bin/sbcgi/sitebuilder.cgi
/fcgi-bin/generate.cgi
/ows-bin/mrtg.cgi
/cgi.cgi/mail/emumail.cgi
/cgi-sys/htmlscript
/ows-bin/mrtg.cfg
/ows-bin/main.cgi
/fcgi-bin/generate.cgi
/cgi-sys/hsx.cgi
/webcgi/mail/nph-mr.cgi
/cgi-sys/sbcgi/sitebuilder.cgi
/cgi-exe/generate.cgi
/cgi-sys/mrtg.cgi
/webcgi/mail/emumail.cgi
/cgi-local/htmlscript
/cgi-sys/mrtg.cfg
/cgi-sys/main.cgi
/cgi-exe/generate.cgi
/cgi-local/hsx.cgi
/cgi-914/mail/nph-mr.cgi
/cgi-local/sbcgi/sitebuilder.cgi
/cgi-home/generate.cgi
/cgi-local/mrtg.cgi
/cgi-914/mail/emumail.cgi
/htbin/htmlscript
/cgi-local/mrtg.cfg
/cgi-local/main.cgi
/cgi-home/generate.cgi
/htbin/hsx.cgi
/cgi-915/mail/nph-mr.cgi
/htbin/sbcgi/sitebuilder.cgi
/cgi-perl/generate.cgi
/htbin/mrtg.cgi
/cgi-915/mail/emumail.cgi
/cgibin/htmlscript
/htbin/mrtg.cfg
/htbin/main.cgi
/cgi-perl/generate.cgi
/cgibin/hsx.cgi
/bin/mail/nph-mr.cgi
/cgibin/sbcgi/sitebuilder.cgi
/scgi-bin/generate.cgi
/cgibin/mrtg.cgi
/bin/mail/emumail.cgi
/cgis/htmlscript
/cgibin/mrtg.cfg
/cgibin/main.cgi
/scgi-bin/generate.cgi
/cgi/mail/nph-mr.cgi
/cgis/hsx.cgi
/cgis/sbcgi/sitebuilder.cgi
/cgi-bin-sdb/generate.cgi
/cgis/mrtg.cgi
/cgi/mail/emumail.cgi
/scripts/htmlscript
/cgis/mrtg.cfg
/cgis/main.cgi
/cgi-bin-sdb/generate.cgi
/mpcgi/mail/nph-mr.cgi
/scripts/hsx.cgi
/scripts/sbcgi/sitebuilder.cgi
/cgi-mod/generate.cgi
/scripts/mrtg.cgi
/mpcgi/mail/emumail.cgi
/cgi-win/htmlscript
/scripts/main.cgi
/scripts/mrtg.cfg
/cgi-mod/generate.cgi
/cgi-bin/mail/nph-mr.cgi
/cgi-win/hsx.cgi
/cgi-win/sbcgi/sitebuilder.cgi
/cgi.cgi/loadpage.cgi
/cgi-win/mrtg.cgi
/fcgi-bin/htmlscript
/cgi-bin/mail/emumail.cgi
/cgi-win/mrtg.cfg
/cgi-win/main.cgi
/cgi.cgi/shop.cgi
/ows-bin/mail/nph-mr.cgi
/fcgi-bin/hsx.cgi
/fcgi-bin/sbcgi/sitebuilder.cgi
/webcgi/loadpage.cgi
/fcgi-bin/mrtg.cgi
/cgi-exe/htmlscript
/ows-bin/mail/emumail.cgi
/fcgi-bin/mrtg.cfg
/fcgi-bin/main.cgi
/webcgi/shop.cgi
/cgi-sys/mail/nph-mr.cgi
/cgi-exe/hsx.cgi
/cgi-exe/sbcgi/sitebuilder.cgi
/cgi-914/loadpage.cgi
/cgi-exe/mrtg.cgi
/cgi-home/htmlscript
/cgi-sys/mail/emumail.cgi
/cgi-exe/mrtg.cfg
/cgi-exe/main.cgi
/cgi-914/shop.cgi
/cgi-local/mail/nph-mr.cgi
/cgi-home/hsx.cgi
/cgi-home/sbcgi/sitebuilder.cgi
/cgi-915/loadpage.cgi
/cgi-home/mrtg.cgi
/cgi-perl/htmlscript
/cgi-local/mail/emumail.cgi
/cgi-home/mrtg.cfg
/cgi-home/main.cgi
/cgi-915/shop.cgi
/htbin/mail/nph-mr.cgi
/cgi-perl/hsx.cgi
/cgi-perl/sbcgi/sitebuilder.cgi
/bin/loadpage.cgi
/cgi-perl/mrtg.cgi
/scgi-bin/htmlscript
/htbin/mail/emumail.cgi
/cgi-perl/mrtg.cfg
/cgi-perl/main.cgi
/bin/shop.cgi
/cgibin/mail/nph-mr.cgi
/scgi-bin/hsx.cgi
/scgi-bin/sbcgi/sitebuilder.cgi
/cgi/loadpage.cgi
/scgi-bin/mrtg.cgi
/cgi-bin-sdb/htmlscript
/scgi-bin/mrtg.cfg
/cgibin/mail/emumail.cgi
/scgi-bin/main.cgi
/cgi/shop.cgi
/cgis/mail/nph-mr.cgi
/cgi-bin-sdb/hsx.cgi
/cgi-bin-sdb/sbcgi/sitebuilder.cgi
/mpcgi/loadpage.cgi
/cgi-bin-sdb/mrtg.cgi
/cgi-mod/htmlscript
/cgi-bin-sdb/mrtg.cfg
/cgis/mail/emumail.cgi
/cgi-bin-sdb/main.cgi
/scripts/mail/nph-mr.cgi
/mpcgi/shop.cgi
/cgi-mod/hsx.cgi
/cgi-mod/sbcgi/sitebuilder.cgi
/cgi-bin/loadpage.cgi
/cgi-mod/mrtg.cgi
/cgi.cgi/sendtemp.pl
/cgi-mod/mrtg.cfg
/scripts/mail/emumail.cgi
/cgi-mod/main.cgi
/cgi-win/mail/nph-mr.cgi
/cgi-bin/shop.cgi
/cgi.cgi/search/search.cgi
/cgi.cgi/search.pl
/ows-bin/loadpage.cgi
/cgi.cgi/quickstore.cgi
/webcgi/sendtemp.pl
/cgi.cgi/nph-emumail.cgi
/cgi-win/mail/emumail.cgi
/cgi.cgi/newsdesk.cgi
/fcgi-bin/mail/nph-mr.cgi
/webcgi/search/search.cgi
/ows-bin/shop.cgi
/webcgi/search.pl
/cgi-sys/loadpage.cgi
/webcgi/quickstore.cgi
/cgi-914/sendtemp.pl
/webcgi/nph-emumail.cgi
/fcgi-bin/mail/emumail.cgi
/webcgi/newsdesk.cgi
/cgi-exe/mail/nph-mr.cgi
/cgi-914/search/search.cgi
/cgi-sys/shop.cgi
/cgi-914/search.pl
/cgi-local/loadpage.cgi
/cgi-914/quickstore.cgi
/cgi-915/sendtemp.pl
/cgi-914/nph-emumail.cgi
/cgi-exe/mail/emumail.cgi
/cgi-914/newsdesk.cgi
/cgi-home/mail/nph-mr.cgi
/cgi-915/search/search.cgi
/cgi-local/shop.cgi
/cgi-915/search.pl
/htbin/loadpage.cgi
/cgi-915/quickstore.cgi
/bin/sendtemp.pl
/cgi-915/nph-emumail.cgi
/cgi-home/mail/emumail.cgi
/cgi-915/newsdesk.cgi
/cgi-perl/mail/nph-mr.cgi
/bin/search/search.cgi
/htbin/shop.cgi
/bin/search.pl
/cgibin/loadpage.cgi
/bin/quickstore.cgi
/cgi/sendtemp.pl
/bin/nph-emumail.cgi
/cgi-perl/mail/emumail.cgi
/bin/newsdesk.cgi
/scgi-bin/mail/nph-mr.cgi
/cgi/search/search.cgi
/cgibin/shop.cgi
/cgi/search.pl
/cgis/loadpage.cgi
/cgi/quickstore.cgi
/mpcgi/sendtemp.pl
/cgi/nph-emumail.cgi
/scgi-bin/mail/emumail.cgi
/cgi/newsdesk.cgi
/cgi-bin-sdb/mail/nph-mr.cgi
/mpcgi/search/search.cgi
/cgis/shop.cgi
/mpcgi/search.pl
/scripts/loadpage.cgi
/mpcgi/quickstore.cgi
/cgi-bin/sendtemp.pl
/mpcgi/nph-emumail.cgi
/cgi-bin-sdb/mail/emumail.cgi
/mpcgi/newsdesk.cgi
/cgi-mod/mail/nph-mr.cgi
/cgi-bin/search/search.cgi
/scripts/shop.cgi
/cgi-bin/search.pl
/cgi-win/loadpage.cgi
/cgi-bin/quickstore.cgi
/ows-bin/sendtemp.pl
/cgi-bin/nph-emumail.cgi
/cgi-mod/mail/emumail.cgi
/cgi-bin/newsdesk.cgi
/cgi.cgi/netauth.cgi
/ows-bin/search/search.cgi
/cgi-win/shop.cgi
/ows-bin/search.pl
/fcgi-bin/loadpage.cgi
/ows-bin/quickstore.cgi
/cgi-sys/sendtemp.pl
/ows-bin/nph-emumail.cgi
/cgi.cgi/ttawebtop.cgi/
/ows-bin/newsdesk.cgi
/webcgi/netauth.cgi
/cgi-sys/search/search.cgi
/fcgi-bin/shop.cgi
/cgi-sys/search.pl
/cgi-exe/loadpage.cgi
/cgi-sys/quickstore.cgi
/cgi-local/sendtemp.pl
/cgi-sys/nph-emumail.cgi
/webcgi/ttawebtop.cgi/
/cgi-sys/newsdesk.cgi
/cgi-914/netauth.cgi
/cgi-local/search/search.cgi
/cgi-exe/shop.cgi
/cgi-local/search.pl
/cgi-home/loadpage.cgi
/cgi-local/quickstore.cgi
/htbin/sendtemp.pl
/cgi-local/nph-emumail.cgi
/cgi-914/ttawebtop.cgi/
/cgi-local/newsdesk.cgi
/cgi-915/netauth.cgi
/htbin/search/search.cgi
/cgi-home/shop.cgi
/htbin/search.pl
/cgi-perl/loadpage.cgi
/htbin/quickstore.cgi
/cgibin/sendtemp.pl
/htbin/nph-emumail.cgi
/cgi-915/ttawebtop.cgi/
/htbin/newsdesk.cgi
/bin/netauth.cgi
/cgibin/search/search.cgi
/cgi-perl/shop.cgi
/cgibin/search.pl
/scgi-bin/loadpage.cgi
/cgibin/quickstore.cgi
/cgis/sendtemp.pl
/cgibin/nph-emumail.cgi
/bin/ttawebtop.cgi/
/cgibin/newsdesk.cgi
/cgi/netauth.cgi
/cgis/search/search.cgi
/scgi-bin/shop.cgi
/cgis/search.pl
/cgi-bin-sdb/loadpage.cgi
/cgis/quickstore.cgi
/scripts/sendtemp.pl
/cgis/nph-emumail.cgi
/cgi/ttawebtop.cgi/
/cgis/newsdesk.cgi
/mpcgi/netauth.cgi
/scripts/search/search.cgi
/cgi-bin-sdb/shop.cgi
/scripts/search.pl
/cgi-mod/loadpage.cgi
/scripts/quickstore.cgi
/cgi-win/sendtemp.pl
/scripts/nph-emumail.cgi
/mpcgi/ttawebtop.cgi/
/scripts/newsdesk.cgi
/cgi-bin/netauth.cgi
/cgi-win/search/search.cgi
/cgi-mod/shop.cgi
/cgi-win/search.pl
/cgi.cgi/traffic.cgi
/cgi-win/quickstore.cgi
/fcgi-bin/sendtemp.pl
/cgi-win/nph-emumail.cgi
/cgi-bin/ttawebtop.cgi/
/cgi-win/newsdesk.cgi
/ows-bin/netauth.cgi
/fcgi-bin/search/search.cgi
/cgi.cgi/technote/main.cgi
/fcgi-bin/search.pl
/webcgi/traffic.cgi
/fcgi-bin/quickstore.cgi
/cgi-exe/sendtemp.pl
/fcgi-bin/nph-emumail.cgi
/ows-bin/ttawebtop.cgi/
/fcgi-bin/newsdesk.cgi
/cgi-sys/netauth.cgi
/cgi-exe/search/search.cgi
/webcgi/technote/main.cgi
/cgi-exe/search.pl
/cgi-914/traffic.cgi
/cgi-exe/quickstore.cgi
/cgi-home/sendtemp.pl
/cgi-exe/nph-emumail.cgi
/cgi-sys/ttawebtop.cgi/
/cgi-exe/newsdesk.cgi
/cgi-local/netauth.cgi
/cgi-home/search/search.cgi
/cgi-914/technote/main.cgi
/cgi-home/search.pl
/cgi-915/traffic.cgi
/cgi-home/quickstore.cgi
/cgi-perl/sendtemp.pl
/cgi-home/nph-emumail.cgi
/cgi-local/ttawebtop.cgi/
/cgi-home/newsdesk.cgi
/htbin/netauth.cgi
/cgi-perl/search/search.cgi
/cgi-915/technote/main.cgi
/cgi-perl/search.pl
/bin/traffic.cgi
/cgi-perl/quickstore.cgi
/scgi-bin/sendtemp.pl
/cgi-perl/nph-emumail.cgi
/htbin/ttawebtop.cgi/
/cgi-perl/newsdesk.cgi
/cgibin/netauth.cgi
/scgi-bin/search/search.cgi
/bin/technote/main.cgi
/cgi/traffic.cgi
/scgi-bin/search.pl
/cgi-bin-sdb/sendtemp.pl
/scgi-bin/quickstore.cgi
/scgi-bin/nph-emumail.cgi
/cgibin/ttawebtop.cgi/
/scgi-bin/newsdesk.cgi
/cgis/netauth.cgi
/cgi-bin-sdb/search/search.cgi
/cgi/technote/main.cgi
/mpcgi/traffic.cgi
/cgi-bin-sdb/search.pl
/cgi-mod/sendtemp.pl
/cgi-bin-sdb/quickstore.cgi
/cgi-bin-sdb/nph-emumail.cgi
/cgis/ttawebtop.cgi/
/cgi-bin-sdb/newsdesk.cgi
/scripts/netauth.cgi
/cgi-mod/search/search.cgi
/mpcgi/technote/main.cgi
/cgi-bin/traffic.cgi
/cgi-mod/search.pl
/cgi.cgi/talkback.cgi
/cgi-mod/quickstore.cgi
/cgi-mod/nph-emumail.cgi
/scripts/ttawebtop.cgi/
/cgi-mod/newsdesk.cgi
/cgi-win/netauth.cgi
/cgi.cgi/story/story.pl
/ows-bin/traffic.cgi
/cgi.cgi/story.pl
/cgi-bin/technote/main.cgi
/webcgi/talkback.cgi
/cgi.cgi/store/index.cgi
/cgi.cgi/store.cgi
/cgi-win/ttawebtop.cgi/
/cgi.cgi/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd
/fcgi-bin/netauth.cgi
/webcgi/story/story.pl
/cgi-sys/traffic.cgi
/webcgi/story.pl
/ows-bin/technote/main.cgi
/webcgi/store/index.cgi
/cgi-914/talkback.cgi
/webcgi/store.cgi
/fcgi-bin/ttawebtop.cgi/
/webcgi/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd
/cgi-exe/netauth.cgi
/cgi-914/story/story.pl
/cgi-local/traffic.cgi
/cgi-914/story.pl
/cgi-sys/technote/main.cgi
/cgi-914/store/index.cgi
/cgi-915/talkback.cgi
/cgi-914/store.cgi
/cgi-exe/ttawebtop.cgi/
/cgi-914/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd
/cgi-home/netauth.cgi
/cgi-915/story/story.pl
/htbin/traffic.cgi
/cgi-915/story.pl
/cgi-915/store/index.cgi
/cgi-local/technote/main.cgi
/bin/talkback.cgi
/cgi-915/store.cgi
/cgi-home/ttawebtop.cgi/
/cgi-915/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd
/cgi-perl/netauth.cgi
/bin/story/story.pl
/cgibin/traffic.cgi
/bin/story.pl
/bin/store/index.cgi
/cgi/talkback.cgi
/htbin/technote/main.cgi
/bin/store.cgi
/cgi-perl/ttawebtop.cgi/
/bin/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd
/scgi-bin/netauth.cgi
/cgi/story/story.pl
/cgis/traffic.cgi
/cgi/story.pl
/cgi/store/index.cgi
/mpcgi/talkback.cgi
/cgibin/technote/main.cgi
/cgi/store.cgi
/scgi-bin/ttawebtop.cgi/
/cgi-bin-sdb/netauth.cgi
/cgi/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd
/mpcgi/story/story.pl
/scripts/traffic.cgi
/mpcgi/story.pl
/mpcgi/store/index.cgi
/cgi-bin/talkback.cgi
/mpcgi/store.cgi
/cgis/technote/main.cgi
/cgi-bin-sdb/ttawebtop.cgi/
/cgi-mod/netauth.cgi
/mpcgi/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd
/cgi-bin/story/story.pl
/cgi-win/traffic.cgi
/cgi-bin/story.pl
/cgi-bin/store/index.cgi
/ows-bin/talkback.cgi
/scripts/technote/main.cgi
/cgi-bin/store.cgi
/cgi-mod/ttawebtop.cgi/
/cgi.cgi/sojourn.cgi
/cgi-bin/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd
/ows-bin/story/story.pl
/fcgi-bin/traffic.cgi
/ows-bin/story.pl
/ows-bin/store/index.cgi
/cgi-sys/talkback.cgi
/cgi-win/technote/main.cgi
/ows-bin/store.cgi
/cgi.cgi/shopper.cgi
/webcgi/sojourn.cgi
/ows-bin/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd
/cgi-sys/story/story.pl
/cgi-exe/traffic.cgi
/cgi-sys/story.pl
/cgi-sys/store/index.cgi
/cgi-local/talkback.cgi
/fcgi-bin/technote/main.cgi
/cgi-sys/store.cgi
/webcgi/shopper.cgi
/cgi-914/sojourn.cgi
/cgi-sys/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd
/cgi-local/story/story.pl
/cgi-home/traffic.cgi
/cgi-local/story.pl
/cgi-local/store/index.cgi
/htbin/talkback.cgi
/cgi-exe/technote/main.cgi
/cgi-local/store.cgi
/cgi-914/shopper.cgi
/cgi-915/sojourn.cgi
/cgi-local/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd
/htbin/story/story.pl
/cgi-perl/traffic.cgi
/htbin/store/index.cgi
/htbin/story.pl
/cgibin/talkback.cgi
/cgi-home/technote/main.cgi
/htbin/store.cgi
/cgi-915/shopper.cgi
/bin/sojourn.cgi
/htbin/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd
/cgibin/story/story.pl
/scgi-bin/traffic.cgi
/cgibin/store/index.cgi
/cgibin/story.pl
/cgis/talkback.cgi
/cgi-perl/technote/main.cgi
/cgibin/store.cgi
/bin/shopper.cgi
/cgi/sojourn.cgi
/cgibin/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd
/cgis/story/story.pl
/cgi-bin-sdb/traffic.cgi
/cgis/story.pl
/cgis/store/index.cgi
/scripts/talkback.cgi
/scgi-bin/technote/main.cgi
/cgis/store.cgi
/cgi/shopper.cgi
/mpcgi/sojourn.cgi
/cgis/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd
/scripts/story/story.pl
/cgi-mod/traffic.cgi
/scripts/story.pl
/scripts/store/index.cgi
/cgi-win/talkback.cgi
/cgi-bin-sdb/technote/main.cgi
/scripts/store.cgi
/cgi-bin/sojourn.cgi
/mpcgi/shopper.cgi
/scripts/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd
/cgi-win/story/story.pl
/servlet/webacc
/cgi-win/story.pl
/cgi-win/store/index.cgi
/fcgi-bin/talkback.cgi
/cgi-mod/technote/main.cgi
/cgi-win/store.cgi
/ows-bin/sojourn.cgi
/cgi-bin/shopper.cgi
/cgi-win/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd
/fcgi-bin/story/story.pl
/webcalendar/forum.php
/fcgi-bin/story.pl
/fcgi-bin/store/index.cgi
/cgi-exe/talkback.cgi
/page.cgi
/fcgi-bin/store.cgi
/cgi-sys/sojourn.cgi
/ows-bin/shopper.cgi
/fcgi-bin/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd
/cgi-exe/story/story.pl
/base/webmail/readmsg.php
/cgi-exe/story.pl
/cgi-exe/store/index.cgi
/cgi-home/talkback.cgi
/cgi.cgi/zml.cgi
/cgi-exe/store.cgi
/cgi-local/sojourn.cgi
/cgi-sys/shopper.cgi
/cgi-exe/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd
/cgi-home/story/story.pl
/cgi.cgi/YaBB.pl
/cgi-home/story.pl
/cgi-home/store/index.cgi
/cgi-perl/talkback.cgi
/webcgi/zml.cgi
/cgi-home/store.cgi
/htbin/sojourn.cgi
/cgi-local/shopper.cgi
/cgi-home/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd
/cgi-perl/story/story.pl
/webcgi/YaBB.pl
/cgi-perl/story.pl
/cgi-perl/store/index.cgi
/scgi-bin/talkback.cgi
/cgi-914/zml.cgi
/cgi-perl/store.cgi
/cgibin/sojourn.cgi
/htbin/shopper.cgi
/cgi-perl/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd
/scgi-bin/story/story.pl
/cgi-914/YaBB.pl
/scgi-bin/story.pl
/scgi-bin/store/index.cgi
/cgi-bin-sdb/talkback.cgi
/cgi-915/zml.cgi
/scgi-bin/store.cgi
/cgis/sojourn.cgi
/cgibin/shopper.cgi
/scgi-bin/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd
/cgi-bin-sdb/story/story.pl
/cgi-915/YaBB.pl
/cgi-bin-sdb/story.pl
/cgi-bin-sdb/store/index.cgi
/cgi-mod/talkback.cgi
/bin/zml.cgi
/cgi-bin-sdb/store.cgi
/scripts/sojourn.cgi
/cgis/shopper.cgi
/cgi-bin-sdb/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd
/cgi-mod/story/story.pl
/bin/YaBB.pl
/cgi-mod/story.pl
/cgi-mod/store/index.cgi
/cgi.cgi/webspirs.cgi
/cgi/zml.cgi
/cgi-mod/store.cgi
/cgi-win/sojourn.cgi
/scripts/shopper.cgi
/cgi.cgi/webplus
/cgi-mod/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd
/cgi/YaBB.pl
/cgi.cgi/webmail/html/emumail.cgi
/search
/webcgi/webspirs.cgi
/mpcgi/zml.cgi
/search
/fcgi-bin/sojourn.cgi
/cgi-win/shopper.cgi
/webcgi/webplus
/../../../../../../../../../../etc/passwd
/mpcgi/YaBB.pl
/webcgi/webmail/html/emumail.cgi
/…/…/…/…/…/…/…/…/…/boot.ini
/cgi-914/webspirs.cgi
/cgi-bin/zml.cgi
/cgi-exe/sojourn.cgi
/………………/etc/passwd
/fcgi-bin/shopper.cgi
/cgi-914/webplus
/%3f.jsp
/cgi-bin/YaBB.pl
/cgi-914/webmail/html/emumail.cgi
/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd
/cgi-915/webspirs.cgi
/ows-bin/zml.cgi
/cgi-home/sojourn.cgi
/%00
/cgi-exe/shopper.cgi
/cgi-915/webplus
/ca//%5C%5C../%5C%5C../%5C%5C../%5C%5C../%5C%5C../%5C%5C../%5C%5Cwindows/%5C%5Cwin.ini
/ows-bin/YaBB.pl
/cgi-915/webmail/html/emumail.cgi
/ca/..%5C%5C..%5C%5C..%5C%5C..%5C%5C..%5C%5C..%5C%5C/%5C%5Cetc/%5C%5Cpasswd
/bin/webspirs.cgi
/cgi-sys/zml.cgi
/cgi-perl/sojourn.cgi
/ca/..%5C%5C..%5C%5C..%5C%5C..%5C%5C..%5C%5C..%5C%5C..%5C%5C..%5C%5Cwinnt/%5C%5Cwin.ini
/cgi-home/shopper.cgi
/bin/webplus
/phpinfo.php
/cgi-sys/YaBB.pl
/bin/webmail/html/emumail.cgi
/phpinfo.php3
/cgi/webspirs.cgi
/cgi-local/zml.cgi
/scgi-bin/sojourn.cgi
/com
/cgi-perl/shopper.cgi
/cgi/webplus
/COM
/cgi-local/YaBB.pl
/cgi/webmail/html/emumail.cgi
/cutenews/index.php
/mpcgi/webspirs.cgi
/htbin/zml.cgi
/cgi-bin-sdb/sojourn.cgi
/cgi.cgi/nph-showlogs.pl
/scgi-bin/shopper.cgi
/mpcgi/webplus
/cgi.cgi/ImageFolio/admin/admin.cgi
/htbin/YaBB.pl
/mpcgi/webmail/html/emumail.cgi
/cgi.cgi/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E
/cgi-bin/webspirs.cgi
/cgibin/zml.cgi
/cgi-mod/sojourn.cgi
/webcgi/nph-showlogs.pl
/cgi-bin-sdb/shopper.cgi
/cgi-bin/webplus
/webcgi/ImageFolio/admin/admin.cgi
/cgibin/YaBB.pl
/cgi-bin/webmail/html/emumail.cgi
/webcgi/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E
/ows-bin/webspirs.cgi
/cgis/zml.cgi
/cgi.cgi/pagelog.cgi
/cgi-914/nph-showlogs.pl
/cgi-mod/shopper.cgi
/ows-bin/webplus
/cgi-914/ImageFolio/admin/admin.cgi
/cgis/YaBB.pl
/ows-bin/webmail/html/emumail.cgi
/cgi-914/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E
/cgi-sys/webspirs.cgi
/scripts/zml.cgi
/webcgi/pagelog.cgi
/cgi-915/nph-showlogs.pl
/cgi.cgi/c32web.exe/ChangeAdminPassword
/cgi-sys/webplus
/cgi-915/ImageFolio/admin/admin.cgi
/scripts/YaBB.pl
/cgi-915/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E
/cgi-sys/webmail/html/emumail.cgi
/cgi-local/webspirs.cgi
/cgi-win/zml.cgi
/cgi-914/pagelog.cgi
/bin/nph-showlogs.pl
/webcgi/c32web.exe/ChangeAdminPassword
/cgi-local/webplus
/bin/ImageFolio/admin/admin.cgi
/cgi-win/YaBB.pl
/bin/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E
/htbin/webspirs.cgi
/cgi-local/webmail/html/emumail.cgi
/fcgi-bin/zml.cgi
/cgi-915/pagelog.cgi
/cgi-914/c32web.exe/ChangeAdminPassword
/cgi/nph-showlogs.pl
/htbin/webplus
/cgi/ImageFolio/admin/admin.cgi
/fcgi-bin/YaBB.pl
/cgi/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E
/cgibin/webspirs.cgi
/htbin/webmail/html/emumail.cgi
/cgi-exe/zml.cgi
/bin/pagelog.cgi
/cgi-915/c32web.exe/ChangeAdminPassword
/mpcgi/nph-showlogs.pl
/cgibin/webplus
/mpcgi/ImageFolio/admin/admin.cgi
/mpcgi/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E
/cgi-exe/YaBB.pl
/cgis/webspirs.cgi
/cgibin/webmail/html/emumail.cgi
/cgi-home/zml.cgi
/cgi/pagelog.cgi
/bin/c32web.exe/ChangeAdminPassword
/cgi-bin/nph-showlogs.pl
/cgis/webplus
/cgi-bin/ImageFolio/admin/admin.cgi
/cgi-bin/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E
/cgi-home/YaBB.pl
/scripts/webspirs.cgi
/cgis/webmail/html/emumail.cgi
/cgi-perl/zml.cgi
/mpcgi/pagelog.cgi
/cgi/c32web.exe/ChangeAdminPassword
/ows-bin/nph-showlogs.pl
/scripts/webplus
/ows-bin/ImageFolio/admin/admin.cgi
/cgi-perl/YaBB.pl
/ows-bin/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E
/cgi-win/webspirs.cgi
/scripts/webmail/html/emumail.cgi
/scgi-bin/zml.cgi
/cgi-bin/pagelog.cgi
/mpcgi/c32web.exe/ChangeAdminPassword
/cgi-sys/nph-showlogs.pl
/cgi-win/webplus
/cgi-sys/ImageFolio/admin/admin.cgi
/scgi-bin/YaBB.pl
/cgi-sys/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E
/fcgi-bin/webspirs.cgi
/cgi-win/webmail/html/emumail.cgi
/cgi-bin-sdb/zml.cgi
/ows-bin/pagelog.cgi
/cgi-bin/c32web.exe/ChangeAdminPassword
/cgi-local/nph-showlogs.pl
/fcgi-bin/webplus
/cgi-local/ImageFolio/admin/admin.cgi
/cgi-bin-sdb/YaBB.pl
/cgi-local/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E
/cgi-exe/webspirs.cgi
/fcgi-bin/webmail/html/emumail.cgi
/cgi-mod/zml.cgi
/cgi-sys/pagelog.cgi
/htbin/nph-showlogs.pl
/ows-bin/c32web.exe/ChangeAdminPassword
/cgi-exe/webplus
/htbin/ImageFolio/admin/admin.cgi
/cgi-mod/YaBB.pl
/htbin/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E
/cgi-home/webspirs.cgi
/cgi-exe/webmail/html/emumail.cgi
/cgi.cgi/unlg1.1
/cgi-local/pagelog.cgi
/cgibin/nph-showlogs.pl
/cgi-sys/c32web.exe/ChangeAdminPassword
/cgi-home/webplus
/cgibin/ImageFolio/admin/admin.cgi
/cgibin/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E
/cgi.cgi/unlg1.2
/cgi-perl/webspirs.cgi
/cgi-home/webmail/html/emumail.cgi
/webcgi/unlg1.1
/htbin/pagelog.cgi
/cgis/nph-showlogs.pl
/cgi-local/c32web.exe/ChangeAdminPassword
/cgi-perl/webplus
/cgis/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E
/cgis/ImageFolio/admin/admin.cgi
/webcgi/unlg1.2
/cgi-perl/webmail/html/emumail.cgi
/scgi-bin/webspirs.cgi
/cgi-914/unlg1.1
/cgibin/pagelog.cgi
/scripts/nph-showlogs.pl
/htbin/c32web.exe/ChangeAdminPassword
/scgi-bin/webplus
/scripts/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E
/scripts/ImageFolio/admin/admin.cgi
/cgi-914/unlg1.2
/scgi-bin/webmail/html/emumail.cgi
/cgi-bin-sdb/webspirs.cgi
/cgi-915/unlg1.1
/cgis/pagelog.cgi
/cgi-win/nph-showlogs.pl
/cgibin/c32web.exe/ChangeAdminPassword
/cgi-bin-sdb/webplus
/cgi-win/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E
/cgi-win/ImageFolio/admin/admin.cgi
/cgi-915/unlg1.2
/cgi-bin-sdb/webmail/html/emumail.cgi
/cgi-mod/webspirs.cgi
/bin/unlg1.1
/scripts/pagelog.cgi
/fcgi-bin/nph-showlogs.pl
/cgis/c32web.exe/ChangeAdminPassword
/cgi-mod/webplus
/fcgi-bin/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E
/fcgi-bin/ImageFolio/admin/admin.cgi
/bin/unlg1.2
/cgi-mod/webmail/html/emumail.cgi
/mambo/administrator/phpinfo.php
/cgi/unlg1.1
/cgi-win/pagelog.cgi
/cgi-exe/nph-showlogs.pl
/scripts/c32web.exe/ChangeAdminPassword
/phpBB/phpinfo.php
/cgi-exe/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E
/cgi-exe/ImageFolio/admin/admin.cgi
/cgi/unlg1.2
/isapi/count.pl
/file/../../../../../../../../etc/passwd
/mpcgi/unlg1.1
/fcgi-bin/pagelog.cgi
/cgi-home/nph-showlogs.pl
/cgi-win/c32web.exe/ChangeAdminPassword
/basilix.php3
/cgi-home/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E
/mpcgi/unlg1.2
/com/
/cgi-home/ImageFolio/admin/admin.cgi
/com/novell/
/cgi-bin/unlg1.1
/cgi-exe/pagelog.cgi
/cgi-perl/nph-showlogs.pl
/fcgi-bin/c32web.exe/ChangeAdminPassword
/com/novell/webaccess
/cgi-bin/unlg1.2
/cgi-perl/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E
/index.php
/cgi-perl/ImageFolio/admin/admin.cgi
/index.php
/ows-bin/unlg1.1
/cgi-home/pagelog.cgi
/scgi-bin/nph-showlogs.pl
/cgi-exe/c32web.exe/ChangeAdminPassword
/cgi.cgi/
/ows-bin/unlg1.2
/scgi-bin/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E
/server-status
/scgi-bin/ImageFolio/admin/admin.cgi
/
/cgi-sys/unlg1.1
/cgi-perl/pagelog.cgi
/cgi-bin-sdb/nph-showlogs.pl
/cgi-home/c32web.exe/ChangeAdminPassword
/webcgi/
/cgi-sys/unlg1.2
/
/cgi-bin-sdb/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E
/cgi-bin-sdb/ImageFolio/admin/admin.cgi
/cgi-local/unlg1.1
/cgi-mod/nph-showlogs.pl
/scgi-bin/pagelog.cgi
/cgi.cgi/nph-test-cgi
/cgi-914/
/cgi-perl/c32web.exe/ChangeAdminPassword
/cgi-local/unlg1.2
/cgi-mod/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E
/cgi-mod/ImageFolio/admin/admin.cgi
/cgi-bin/pfdisplay.cgi
/htbin/unlg1.1
/cgi-bin-sdb/pagelog.cgi
/cgi.cgi/pfdispaly.cgi
/webcgi/nph-test-cgi
/cgi-915/
/scgi-bin/c32web.exe/ChangeAdminPassword
/htbin/unlg1.2
/photo/
/photodata/
/cgi.cgi/photo/
/cgibin/unlg1.1
/cgi-mod/pagelog.cgi
/cgi-914/nph-test-cgi
/webcgi/pfdispaly.cgi
/bin/
/cgi-bin-sdb/c32web.exe/ChangeAdminPassword
/cgibin/unlg1.2
/jsp/jspsamp/jspexamples/viewsource.jsp
/jsp/jspsamp/jspexamples/viewsource.jsp
/webcgi/photo/
/cgis/unlg1.1
/%3f.jsp
/cgi-915/nph-test-cgi
/cgi-914/pfdispaly.cgi
/cgi/
/cgi-mod/c32web.exe/ChangeAdminPassword
/cgis/unlg1.2
/%3f.jsp
/../../../../../../../../../../etc/*
/cgi-914/photo/
/scripts/unlg1.1
/bin/nph-test-cgi
/../../../../../../../../../../etc/passw*
/cgi-915/pfdispaly.cgi
/mpcgi/
/bytehoard/index.php
/scripts/unlg1.2
/OpenFile.aspx
/Search
/cgi-915/photo/
/cgi-win/unlg1.1
/cgi/nph-test-cgi
/…/…/…/…/…/…/…/…/…/…/etc/passwd
/bin/pfdispaly.cgi
/cgi-bin/
/cgi.cgi/dose.pl
/cgi-win/unlg1.2
/../config.dat
/c32web.exe/ChangeAdminPassword
/bin/photo/
/fcgi-bin/unlg1.1
/mpcgi/nph-test-cgi
/showmail.pl
/cgi/pfdispaly.cgi
/ows-bin/
/fcgi-bin/unlg1.2
/webcgi/dose.pl
/pdf/
/Administration/
/cgi/photo/
/cgi-exe/unlg1.1
/cgi-bin/nph-test-cgi
/administration/
/mpcgi/pfdispaly.cgi
/cgi-sys/
/cgi-exe/unlg1.2
/cgi-914/dose.pl
/administrator/
/Admin_files/
/mpcgi/photo/
/cgi-home/unlg1.1
/ows-bin/nph-test-cgi
/backdoor/
/cgi-bin/pfdispaly.cgi
/cgi-local/
/cgi-home/unlg1.2
/cgi-915/dose.pl
/code/
/config/
/cgi-bin/photo/
/cgi-perl/unlg1.1
/cgi-sys/nph-test-cgi
/counter/
/ows-bin/pfdispaly.cgi
/htbin/
/cgi-perl/unlg1.2
/bin/dose.pl
/credit/
/customers/
/ows-bin/photo/
/cgi-local/nph-test-cgi
/scgi-bin/unlg1.1
/java-plugin/
/cgi-sys/pfdispaly.cgi
/cgibin/
/scgi-bin/unlg1.2
/cgi/dose.pl
/password/
/3rdparty/phpMyAdmin/changelog.php
/cgi-sys/photo/
/htbin/nph-test-cgi
/cgi-bin-sdb/unlg1.1
/3rdparty/phpMyAdmin/ChangeLog
/cgi-local/pfdispaly.cgi
/cgis/
/cgi-bin-sdb/unlg1.2
/mpcgi/dose.pl
/readme
/phpMyAdmin/changelog.php
/cgi-local/photo/
/cgibin/nph-test-cgi
/cgi-mod/unlg1.1
/phpMyAdmin/ChangeLog
/htbin/pfdispaly.cgi
/scripts/
/cgi-mod/unlg1.2
/cgi-bin/dose.pl
/README.TXT
/3rdparty/phpmyadmin/changelog.php
/htbin/photo/
/cgis/nph-test-cgi
/readme.txt
/3rdparty/phpmyadmin/ChangeLog
/cgibin/pfdispaly.cgi
/cgi-win/
/ows-bin/dose.pl
/root/
/secure/
/phpmyadmin/changelog.php
/cgibin/photo/
/scripts/nph-test-cgi
/secured/
/phpmyadmin/ChangeLog
/cgis/pfdispaly.cgi
/fcgi-bin/
/cgi-sys/dose.pl
/server_stats/
/services/
/pma/changelog.php
/cgis/photo/
/software/
/cgi-win/nph-test-cgi
/pma/ChangeLog
/scripts/pfdispaly.cgi
/cgi-exe/
/cgi-local/dose.pl
/source/
/sql/
/src/
/scripts/photo/
/ssi/
/fcgi-bin/nph-test-cgi
/_pages
/cgi-win/pfdispaly.cgi
/cgi-home/
/htbin/dose.pl
/scripts/cphost.dll
/img-sys/
/java-sys/
/cgi-win/photo/
/boilerplate.asp
/cgi-exe/nph-test-cgi
/forum-ra.asp
/fcgi-bin/pfdispaly.cgi
/cgibin/dose.pl
/cgi-perl/
/forum-ra.asp
/forum-ra.asp
/forum-ra.asp
/forum-ra_professionnel.asp
/fcgi-bin/photo/
/cgi-home/nph-test-cgi
/forum-ra_professionnel.asp
/cgi-exe/pfdispaly.cgi
/cgis/dose.pl
/forum-ra_professionnel.asp
/scgi-bin/
/forum-ra_professionnel.asp
/forum-ra_professionnel.asp
/forum-ra_professionnel.asp
/cgi-exe/photo/
/cgi-perl/nph-test-cgi
/forum.asp
/cgi-home/pfdispaly.cgi
/scripts/dose.pl
/forum.asp
/cgi-bin-sdb/
/forum.asp
/forum.asp
/forum.asp
/cgi-home/photo/
/scgi-bin/nph-test-cgi
/forum.asp
/cgi-perl/pfdispaly.cgi
/forum1.asp
/cgi-win/dose.pl
/forum1.asp
/cgi-mod/
/forum1.asp
/forum1.asp
/cgi-perl/photo/
/cgi-bin-sdb/nph-test-cgi
/scgi-bin/pfdispaly.cgi
/forum1.asp
/forum1.asp
/fcgi-bin/dose.pl
/forum1.asp
/forum1.asp
/forum1.asp
/forum1.asp
/scgi-bin/photo/
/cgi-mod/nph-test-cgi
/cgi-bin-sdb/pfdispaly.cgi
/forum1.asp
/forum1.asp
/cgi-exe/dose.pl
/forum1.asp
/forum1_professionnel.asp
/forum1_professionnel.asp
/forum1_professionnel.asp
/cgi-bin-sdb/photo/
/forum1_professionnel.asp
/cgi-mod/pfdispaly.cgi
/forum1_professionnel.asp
/forum1_professionnel.asp
/cgi-home/dose.pl
/forum1_professionnel.asp
/forum1_professionnel.asp
/forum1_professionnel.asp
/forum1_professionnel.asp
/cgi-mod/photo/
/forum1_professionnel.asp
/forum1_professionnel.asp
/forum1_professionnel.asp
/forum1_professionnel.asp
/cgi-perl/dose.pl
/forum1_professionnel.asp
/forum1_professionnel.asp
/forum1_professionnel.asp
/forum1_professionnel.asp
/forum_arc.asp
/forum_arc.asp
/forum_arc.asp
/forum_arc.asp
/forum_arc.asp
/scgi-bin/dose.pl
/forum_professionnel.asp
/forum_professionnel.asp
/forum_professionnel.asp
/forum_professionnel.asp
/forum_professionnel.asp
/forum_professionnel.asp
/imprimer.asp
/imprimer.asp
/imprimer.asp
/imprimer.asp
/cgi-bin-sdb/dose.pl
/imprimer.asp
/imprimer.asp
/mailview.cgi
/modif_infos.asp
/modif_infos.asp
/modif_infos.asp
/modif_infos.asp
/cgi-mod/dose.pl
/modif_infos.asp
/modif_infos.asp
/quikmail/nph-emumail.cgi
/rubrique.asp
/rubrique.asp
/rubrique.asp
/rubrique.asp
/rubrique.asp
/rubrique.asp
/rubrique.asp
/shoutbox/expanded.php
/web_app/WEB-INF/webapp.properties
/cgi.cgi/magiccard.cgi
/.bashrc
/.bash_history
/.forward
/.history
/.htaccess
/.lynx_cookies
/.mysql_history
/.passwd
/.pinerc
/webcgi/magiccard.cgi
/.proclog
/.plan
/.procmailrc
/.profile
/.rhosts
/.sh_history
/.ssh
/.ssh/authorized_keys
/.ssh/known_hosts
/cgi-914/magiccard.cgi
////../../data/config/microsrv.cfg
////////../../../../../../etc/passwd
/icons/
/manual/images/
/com/
/COM/
/doc/packages/
/image/
/javax/
/cgi-915/magiccard.cgi
/scripts/
/perl/
/SUNWmc/htdocs/en_US/
/search/inc/
/images/
/docs/
/examples/
/style/
/styles/
/bin/magiccard.cgi
/%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwinnt%5cwin.ini
/%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwinnt%5cwin.ini
///////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
/docs/NED
/shop/normal_html.cgi
/boilerplate.asp
/cgi.cgi/FileSeek.cgi
/cgi.cgi/FileSeek.cgi
/cgi.cgi/FileSeek2.cgi
/cgi/magiccard.cgi
/
/cgi.cgi/FileSeek2.cgi
/images/
/3rdparty/phpMyAdmin/export.php
/dcforum/dcforum.cgi
/cgi.cgi/dcforum.cgi
/webcgi/FileSeek.cgi
/webcgi/FileSeek.cgi
/webcgi/FileSeek2.cgi
/mpcgi/magiccard.cgi
/webcgi/FileSeek2.cgi
/%00/
/internal.sws
/phpMyAdmin/export.php
/internal.sws
/webcgi/dcforum.cgi
/cgi-914/FileSeek.cgi
/cgi-914/FileSeek.cgi
/cgi-914/FileSeek2.cgi
/cgi-bin/magiccard.cgi
/cgi-914/FileSeek2.cgi
/internal.sws
/internal.sws
/3rdparty/phpmyadmin/export.php
/admin/phpinfo.php
/cgi-914/dcforum.cgi
/cgi-915/FileSeek.cgi
/cgi-915/FileSeek.cgi
/cgi-915/FileSeek2.cgi
/ows-bin/magiccard.cgi
/cgi-915/FileSeek2.cgi
/viewimg.php
/reports/temp/
/phpmyadmin/export.php
/cgi.cgi/powerup/r.cgi
/cgi-915/dcforum.cgi
/bin/FileSeek.cgi
/bin/FileSeek.cgi
/bin/FileSeek2.cgi
/cgi-sys/magiccard.cgi
/bin/FileSeek2.cgi
/cgi.cgi/r.cgi
/…/…/…/
/pma/export.php
/webcgi/powerup/r.cgi
/bin/dcforum.cgi
/cgi/FileSeek.cgi
/cgi/FileSeek.cgi
/cgi/FileSeek2.cgi
/cgi-local/magiccard.cgi
/cgi/FileSeek2.cgi
/webcgi/r.cgi
/cgi-914/powerup/r.cgi
/cgi.cgi/apexec.pl
/shoutbox.php
/cgi/dcforum.cgi
/mpcgi/FileSeek.cgi
/mpcgi/FileSeek.cgi
/mpcgi/FileSeek2.cgi
/htbin/magiccard.cgi
/cgi-914/r.cgi
/mpcgi/FileSeek2.cgi
/cgi-915/powerup/r.cgi
/webcgi/apexec.pl
/foo.php3
/mpcgi/dcforum.cgi
/cgi-bin/FileSeek.cgi
/cgi-bin/FileSeek.cgi
/cgi-bin/FileSeek2.cgi
/cgibin/magiccard.cgi
/cgi-bin/FileSeek2.cgi
/cgi-915/r.cgi
/bin/powerup/r.cgi
/cgi-914/apexec.pl
/lcgi/sewse.nlm
/cgi-bin/dcforum.cgi
/ows-bin/FileSeek.cgi
/ows-bin/FileSeek.cgi
/ows-bin/FileSeek2.cgi
/ows-bin/FileSeek2.cgi
/cgis/magiccard.cgi
/bin/r.cgi
/cgi/powerup/r.cgi
/cgi-915/apexec.pl
/cgi.cgi/ustorekeeper.pl
/ows-bin/dcforum.cgi
/cgi-sys/FileSeek.cgi
/cgi-sys/FileSeek.cgi
/cgi-sys/FileSeek2.cgi
/cgi-sys/FileSeek2.cgi
/scripts/magiccard.cgi
/cgi/r.cgi
/mpcgi/powerup/r.cgi
/bin/apexec.pl
/webcgi/ustorekeeper.pl
/cgi-sys/dcforum.cgi
/cgi-local/FileSeek.cgi
/cgi-local/FileSeek.cgi
/cgi-local/FileSeek2.cgi
/cgi-local/FileSeek2.cgi
/cgi-win/magiccard.cgi
/mpcgi/r.cgi
/cgi-bin/powerup/r.cgi
/cgi/apexec.pl
/cgi-914/ustorekeeper.pl
/cgi-local/dcforum.cgi
/htbin/FileSeek.cgi
/htbin/FileSeek.cgi
/htbin/FileSeek2.cgi
/htbin/FileSeek2.cgi
/fcgi-bin/magiccard.cgi
/cgi-bin/r.cgi
/ows-bin/powerup/r.cgi
/cgi-915/ustorekeeper.pl
/mpcgi/apexec.pl
/htbin/dcforum.cgi
/cgibin/FileSeek.cgi
/cgibin/FileSeek.cgi
/cgibin/FileSeek2.cgi
/cgibin/FileSeek2.cgi
/cgi-exe/magiccard.cgi
/ows-bin/r.cgi
/cgi-sys/powerup/r.cgi
/bin/ustorekeeper.pl
/cgi-bin/apexec.pl
/cgibin/dcforum.cgi
/cgis/FileSeek.cgi
/cgis/FileSeek.cgi
/cgis/FileSeek2.cgi
/cgis/FileSeek2.cgi
/cgi-home/magiccard.cgi
/cgi-sys/r.cgi
/cgi-local/powerup/r.cgi
/cgi/ustorekeeper.pl
/ows-bin/apexec.pl
/cgis/dcforum.cgi
/scripts/FileSeek.cgi
/scripts/FileSeek.cgi
/scripts/FileSeek2.cgi
/scripts/FileSeek2.cgi
/cgi-perl/magiccard.cgi
/cgi-local/r.cgi
/htbin/powerup/r.cgi
/cgi-sys/apexec.pl
/mpcgi/ustorekeeper.pl
/scripts/dcforum.cgi
/cgi-win/FileSeek.cgi
/cgi-win/FileSeek.cgi
/cgi-win/FileSeek2.cgi
/cgi-win/FileSeek2.cgi
/scgi-bin/magiccard.cgi
/htbin/r.cgi
/cgibin/powerup/r.cgi
/cgi-local/apexec.pl
/cgi-bin/ustorekeeper.pl
/cgi-win/dcforum.cgi
/fcgi-bin/FileSeek.cgi
/fcgi-bin/FileSeek.cgi
/fcgi-bin/FileSeek2.cgi
/fcgi-bin/FileSeek2.cgi
/cgi-bin-sdb/magiccard.cgi
/cgibin/r.cgi
/cgis/powerup/r.cgi
/htbin/apexec.pl
/ows-bin/ustorekeeper.pl
/fcgi-bin/dcforum.cgi
/cgi-exe/FileSeek.cgi
/cgi-exe/FileSeek.cgi
/cgi-exe/FileSeek2.cgi
/cgi-exe/FileSeek2.cgi
/cgi-mod/magiccard.cgi
/cgis/r.cgi
/scripts/powerup/r.cgi
/cgibin/apexec.pl
/cgi-sys/ustorekeeper.pl
/cgi-exe/dcforum.cgi
/cgi-home/FileSeek.cgi
/cgi-home/FileSeek.cgi
/cgi-home/FileSeek2.cgi
/cgi-home/FileSeek2.cgi
/cgi.cgi/a1disp3.cgi
/scripts/r.cgi
/cgi-win/powerup/r.cgi
/cgis/apexec.pl
/cgi-local/ustorekeeper.pl
/cgi-home/dcforum.cgi
/cgi-perl/FileSeek.cgi
/cgi-perl/FileSeek.cgi
/cgi-perl/FileSeek2.cgi
/cgi-perl/FileSeek2.cgi
/webcgi/a1disp3.cgi
/cgi-win/r.cgi
/fcgi-bin/powerup/r.cgi
/scripts/apexec.pl
/htbin/ustorekeeper.pl
/cgi-perl/dcforum.cgi
/scgi-bin/FileSeek.cgi
/scgi-bin/FileSeek.cgi
/scgi-bin/FileSeek2.cgi
/scgi-bin/FileSeek2.cgi
/cgi-914/a1disp3.cgi
/fcgi-bin/r.cgi
/cgi-exe/powerup/r.cgi
/cgi-win/apexec.pl
/cgibin/ustorekeeper.pl
/scgi-bin/dcforum.cgi
/cgi-bin-sdb/FileSeek.cgi
/cgi-bin-sdb/FileSeek.cgi
/cgi-bin-sdb/FileSeek2.cgi
/cgi-bin-sdb/FileSeek2.cgi
/cgi-915/a1disp3.cgi
/cgi-exe/r.cgi
/cgi-home/powerup/r.cgi
/fcgi-bin/apexec.pl
/cgis/ustorekeeper.pl
/cgi-bin-sdb/dcforum.cgi
/cgi-mod/FileSeek.cgi
/cgi-mod/FileSeek.cgi
/cgi-mod/FileSeek2.cgi
/cgi-mod/FileSeek2.cgi
/bin/a1disp3.cgi
/cgi-home/r.cgi
/cgi-perl/powerup/r.cgi
/cgi-exe/apexec.pl
/scripts/ustorekeeper.pl
/cgi-mod/dcforum.cgi
/cgi.cgi/a1stats/a1disp3.cgi
/cgi.cgi/a1stats/a1disp3.cgi
/cgi.cgi/a1stats/a1disp4.cgi
/server-info
/cgi/a1disp3.cgi
/cgi-perl/r.cgi
/scgi-bin/powerup/r.cgi
/cgi-home/apexec.pl
/cgi-win/ustorekeeper.pl
/
/webcgi/a1stats/a1disp3.cgi
/webcgi/a1stats/a1disp3.cgi
/webcgi/a1stats/a1disp4.cgi
/
/mpcgi/a1disp3.cgi
/scgi-bin/r.cgi
/cgi-bin-sdb/powerup/r.cgi
/cgi-perl/apexec.pl
/cgi-914/a1stats/a1disp3.cgi
/fcgi-bin/ustorekeeper.pl
/
/cgi-914/a1stats/a1disp3.cgi
/cgi-914/a1stats/a1disp4.cgi
/
/cgi-bin/a1disp3.cgi
/cgi-bin-sdb/r.cgi
/cgi-mod/powerup/r.cgi
/cgi-915/a1stats/a1disp3.cgi
/scgi-bin/apexec.pl
/cgi-exe/ustorekeeper.pl
/cgi-915/a1stats/a1disp3.cgi
/cgi.cgi/view_item
/cgi-915/a1stats/a1disp4.cgi
/cgi.cgi/ion-p
/ows-bin/a1disp3.cgi
/cgi-mod/r.cgi
/.DS_Store
/bin/a1stats/a1disp3.cgi
/cgi-bin-sdb/apexec.pl
/cgi-home/ustorekeeper.pl
/bin/a1stats/a1disp3.cgi
/webcgi/view_item
/bin/a1stats/a1disp4.cgi
/webcgi/ion-p
/cgi-sys/a1disp3.cgi
/gallery/index.php
/modules.php
/cgi/a1stats/a1disp3.cgi
/cgi-mod/apexec.pl
/cgi/a1stats/a1disp3.cgi
/cgi-perl/ustorekeeper.pl
/cgi-914/view_item
/cgi/a1stats/a1disp4.cgi
/cgi-914/ion-p
/cgi-local/a1disp3.cgi
/phprocketaddin/
/msadc/Samples/selector/showcode.asp
/mpcgi/a1stats/a1disp3.cgi
/pls/sample/admin_/help/..%255cplsql.conf
/mpcgi/a1stats/a1disp3.cgi
/cgi-915/view_item
/scgi-bin/ustorekeeper.pl
/cgi-915/ion-p
/mpcgi/a1stats/a1disp4.cgi
/htbin/a1disp3.cgi
/iissamples/exair/search/query.idq
/iissamples/exair/search/search.idq
/cgi-bin/a1stats/a1disp3.cgi
/Citrix/PNAgent/
/bin/view_item
/cgi-bin/a1stats/a1disp3.cgi
/cgi-bin-sdb/ustorekeeper.pl
/bin/ion-p
/cgi-bin/a1stats/a1disp4.cgi
/cgibin/a1disp3.cgi
/Citrix/ICAWEB/
/IBMWebAS/
/ows-bin/a1stats/a1disp3.cgi
/IBMWebAS/docs/
/cgi/view_item
/ows-bin/a1stats/a1disp3.cgi
/cgi-mod/ustorekeeper.pl
/cgi/ion-p
/ows-bin/a1stats/a1disp4.cgi
/cgis/a1disp3.cgi
/IBMWebAS/mbeanDocs/
/README
/cgi-sys/a1stats/a1disp3.cgi
/soapdocs/webapps/soap/WEB-INF/config/soapConfig.xml
/mpcgi/view_item
/cgi-sys/a1stats/a1disp3.cgi
/bmp/README.txt
/mpcgi/ion-p
/cgi-sys/a1stats/a1disp4.cgi
/scripts/a1disp3.cgi
/OA_HTML/PTB/mwa_readme.htm
/hp-ux/
/cgi-local/a1stats/a1disp3.cgi
/hp_docs/xmltools/
/cgi-bin/view_item
/cgi-local/a1stats/a1disp3.cgi
/doc/Judy/demo/
/cgi-bin/ion-p
/cgi-local/a1stats/a1disp4.cgi
/cgi-win/a1disp3.cgi
/doc/vxvm/
/doc/Judy/
/htbin/a1stats/a1disp3.cgi
/doc/TechPrtServ/
/ows-bin/view_item
/htbin/a1stats/a1disp3.cgi
/pdfs/
/ows-bin/ion-p
/htbin/a1stats/a1disp4.cgi
/fcgi-bin/a1disp3.cgi
/crm/
/static/
/cgibin/a1stats/a1disp3.cgi
/w3c/
/cgi-sys/view_item
/cgibin/a1stats/a1disp3.cgi
/dynamic/
/cgi-sys/ion-p
/cgibin/a1stats/a1disp4.cgi
/cgi-exe/a1disp3.cgi
/cgi.cgi/c32web.exe/GetImage
/aspnet_files/
/cgis/a1stats/a1disp3.cgi
/cgi-local/view_item
/common.php
/cgis/a1stats/a1disp3.cgi
/READ_THIS_FIRST.txt
/cgi-local/ion-p
/cgis/a1stats/a1disp4.cgi
/cgi-home/a1disp3.cgi
/webcgi/c32web.exe/GetImage
/config/readme.txt
/scripts/a1stats/a1disp3.cgi
/htbin/view_item
/data/readme.txt
/scripts/a1stats/a1disp3.cgi
/htbin/ion-p
/log/readme.txt
/scripts/a1stats/a1disp4.cgi
/cgi-perl/a1disp3.cgi
/cgi-914/c32web.exe/GetImage
/logs/readme.txt
/cgi-win/a1stats/a1disp3.cgi
/cgibin/view_item
/uploads/readme.txt
/cgi-win/a1stats/a1disp3.cgi
/cgibin/ion-p
/sdk/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/etc/vmware/hostd/vmInventory.xml
/cgi-win/a1stats/a1disp4.cgi
/cgi-915/c32web.exe/GetImage
/scgi-bin/a1disp3.cgi
/services/Version
/fcgi-bin/a1stats/a1disp3.cgi
/cgis/view_item
/3rdparty/phpMyAdmin/setup
/fcgi-bin/a1stats/a1disp3.cgi
/cgis/ion-p
/jsp/
/fcgi-bin/a1stats/a1disp4.cgi
/bin/c32web.exe/GetImage
/axis/services/Version
/cgi-bin-sdb/a1disp3.cgi
/cgi-exe/a1stats/a1disp3.cgi
/scripts/view_item
/phpMyAdmin/setup
/cgi-exe/a1stats/a1disp3.cgi
/scripts/ion-p
/3rdparty/phpMyAdmin/
/cgi-exe/a1stats/a1disp4.cgi
/axis2/services/Version
/cgi/c32web.exe/GetImage
/cgi-mod/a1disp3.cgi
/cgi-home/a1stats/a1disp3.cgi
/cgi-win/view_item
/3rdparty/phpmyadmin/setup
/cgi-home/a1stats/a1disp3.cgi
/cgi-win/ion-p
/phpMyAdmin/
/cgi-home/a1stats/a1disp4.cgi
/imcws/services/Version
/mpcgi/c32web.exe/GetImage
/nn.asp
/cgi-perl/a1stats/a1disp3.cgi
/fcgi-bin/view_item
/phpmyadmin/setup
/cgi-perl/a1stats/a1disp3.cgi
/fcgi-bin/ion-p
/3rdparty/phpmyadmin/
/cgi-perl/a1stats/a1disp4.cgi
/WebServiceImpl/services/Version
/cgi-bin/c32web.exe/GetImage
/../../windows/dvr2.ini
/scgi-bin/a1stats/a1disp3.cgi
/cgi-exe/view_item
/pma/setup
/scgi-bin/a1stats/a1disp3.cgi
/cgi-exe/ion-p
/scgi-bin/a1stats/a1disp4.cgi
/phpmyadmin/
/dswsbobje/services/Version
/ows-bin/c32web.exe/GetImage
/htdocs/../../../../../../../../../../../etc/passwd
/cgi-bin-sdb/a1stats/a1disp3.cgi
/cgi-home/view_item
/.svn/entries
/cgi-bin-sdb/a1stats/a1disp3.cgi
/cgi-home/ion-p
/pma/
/cgi-bin-sdb/a1stats/a1disp4.cgi
/ws/services/Version
/cgi-sys/c32web.exe/GetImage
/.svn/wc.db
/cgi-mod/a1stats/a1disp3.cgi
/cgi-perl/view_item
/.git/index
/cgi-mod/a1stats/a1disp3.cgi
/cgi-perl/ion-p
/help/../../../../../../../../../../../../../../../../etc/shadow
/cgi-mod/a1stats/a1disp4.cgi
/3rdparty/phpMyAdmin/server_sync.php
/cgi-local/c32web.exe/GetImage
/.git/HEAD
/3rdparty/phpMyAdmin/Documentation.html
/scgi-bin/view_item
/repository/
/Trace.axd
/scgi-bin/ion-p
/rsa
/rsa.old
/phpMyAdmin/server_sync.php
/htbin/c32web.exe/GetImage
/dsa
/phpMyAdmin/Documentation.html
/cgi-bin-sdb/view_item
/dsa.old
/id_rsa
/cgi-bin-sdb/ion-p
/id_rsa.old
/id_dsa
/3rdparty/phpmyadmin/server_sync.php
/cgibin/c32web.exe/GetImage
/id_dsa.old
/3rdparty/phpmyadmin/Documentation.html
/cgi-mod/view_item
/identity
/key
/key.priv
/cgi-mod/ion-p
/.git/config
/phpmyadmin/server_sync.php
/cgis/c32web.exe/GetImage
/Portals/_default/Cache/ReadMe.txt
/phpmyadmin/Documentation.html
/manage
/script
/404.php
/moadmin.php
/README.mediawiki
/3rdparty/phpMyAdmin/doc/html/index.html
/pma/server_sync.php
/scripts/c32web.exe/GetImage
/3rdparty/phpMyAdmin/docs/html/index.html
/pma/Documentation.html
/jenkins/manage
/jenkins/script
/web/ajax_pluginconf.php
/wu-moadmin.php
/web/download_file.php
/web/download_file.php
/phpMyAdmin/doc/html/index.html
/cgi-win/c32web.exe/GetImage
/phpMyAdmin/docs/html/index.html
/hudson/manage
/README.markdown
/hudson/script
/magmi/web/ajax_pluginconf.php
/phpmoadmin/moadmin.php
/magmi/web/download_file.php
/magmi/web/download_file.php
/3rdparty/phpmyadmin/doc/html/index.html
/fcgi-bin/c32web.exe/GetImage
/3rdparty/phpmyadmin/docs/html/index.html
/README
/app/plugins/php_plugin/phpinfo.php
/cms/README.markdown
/magmi-importer/web/ajax_pluginconf.php
/phpmoadmin/wu-moadmin.php
/magmi-importer/web/download_file.php
/magmi-importer/web/download_file.php
/phpmyadmin/doc/html/index.html
/cgi-exe/c32web.exe/GetImage
/phpmyadmin/docs/html/index.html
/cms/README
/3rdparty/phpMyAdmin/README
/symphony/README.markdown
/magento/magmi/web/ajax_pluginconf.php
/wu-moadmin/moadmin.php
/magento/magmi/web/download_file.php
/magento/magmi/web/download_file.php
/pma/doc/html/index.html
/cgi-home/c32web.exe/GetImage
/pma/docs/html/index.html
/symphony/README
/phpMyAdmin/README
/.ssh/id_rsa
/magento/magmi-importer/web/ajax_pluginconf.php
/wu-moadmin/wu-moadmin.php
/magento/magmi-importer/web/download_file.php
/magento/magmi-importer/web/download_file.php
/.ssh/id_rsa.pub
/cgi-perl/c32web.exe/GetImage
/.ssh/id_dsa
/.ssh/id_dsa.pub
/3rdparty/phpmyadmin/README
/.ssh/id_dss
/shop/magmi/web/ajax_pluginconf.php
/moadmin/moadmin.php
/shop/magmi/web/download_file.php
/shop/magmi/web/download_file.php
/.ssh/id_dss.pub
/scgi-bin/c32web.exe/GetImage
/.ssh/id_ecdsa.pub
/.ssh/id_ecdsa
/phpmyadmin/README
/.ssh/id_ed25519.pub
/shop/magmi-importer/web/ajax_pluginconf.php
/moadmin/wu-moadmin.php
/shop/magmi-importer/web/download_file.php
/shop/magmi-importer/web/download_file.php
/.ssh/id_ed25519
/cgi-bin-sdb/c32web.exe/GetImage
/.ssh/identity
/.idea/misc.xml
/pma/README
/.idea/modules.xml
/.idea/vcs.xml
/.idea/workspace.xml
/.idea/scopes/scope_settings.xml
//WEB-INF/web.xml
/.env
/cgi-mod/c32web.exe/GetImage
/wp-content/themes/twentyeleven/images/headers/server.php
/wp-includes/Requests/Utility/content-post.php
/wp-includes/js/tinymce/themes/modern/Meuhy.php
/wp-license.php
/assets/mobirise/css/meta.php
/Meuhy.php
/shell
/hp/device/webAccess/index.htm
/hp/device/webAccess/index.htm;jsessionid=vu5sxh6we1
/wordpresswp-content/themes/twentyeleven/images/headers/server.php
/pagina.phtml
/wordpresswp-includes/Requests/Utility/content-post.php
/wordpresswp-includes/js/tinymce/themes/modern/Meuhy.php
/wordpresswp-license.php
/onnik/pagina.phtml
/phpAds/click.php3
/phpads/click.php3
/ads/click.php3
/dana-na/../dana/html5acc/guacamole/../../../../../../etc/passwd
/RxSQTQmWXA

Looping Canned Video For Demos

Here’s a few simple(?) steps to stream pre-recorded video into your VMS.

First you need to install an RTMP server that can do RTMP to RTSP conversion. You can use Evostream, Wowza or possibly Nimblestreamer.  Nginx-rtmp won’t work as it does not support RTSP output.

Then get FFMpeg (windows users can get it here).

Find or create the canned video that you want to use, and store it somewhere accessible.

In this example, I have used a file called R1.mp4 and my RTMP server (Evostream) is located at 192.168.0.109. The command used is this:

ffmpeg -re -stream_loop -1 -i e:\downloads\r1.mp4 -c copy -fflags +genpts -f flv rtmp://192.168.0.109/live/r1

Once this is streaming (and you can verify using VLC and opening the RTMP url you provided), you can go to your VMS and add a generic RTSP camera.

For Evostream, the RTSP output is on a different port, and has a slightly different format, so in the recorder I add:

rtsp://192.168.0.109:5544/r1

Other RTMP servers may have a slightly different transform of the URL, so check the manual.

I now have a video looping into the VMS and I can run tests and benchmarks on the exact same feed w/o needing an IP camera.

 

 

Safe, Easy, Advanced

You can only pick 2 though.

Admitting mistakes is hard; it’s so hard that people will pay good money just to be told that they are not to blame for the mistake. That someone else is responsible for their stupidity. And sometimes they’re right, sometimes not.

Anton Yelchin was only 27 when he died, he left his car in neutral on an incline. The car started rolling and killed him. Since it would be unbearable to accept that Anton simply made a mistake, lawsuits were filed.

Another suitor claimed that the lever was too complex for people to operate, therefore the manufacturer is liable for the damage that occurs when people don’t operate them correctly. The car had rolled over her foot, and while there were no broken bones, she was now experienced “escalating pains”, and demanded reparations. One argument was that the car did not have the same feature as a more expensive BMW.

Tragically, every year more than 30 kids are forgotten in cars and die. When I bring this up with people, everyone says “it won’t ever happen to us”, and so there’s zero motivation to spend extra on such a precaution. The manufacturers know this, and since there’s also liability risk, they are not offering it. So, every year, kids bake to death in cars. It’s a gruesome fate for the kids, but the parents will never recover either.

Is it wrong to “blame the victim”?

I think the word “blame” has too many negative connotations associated to be useful in this context. Did the person’s action/inaction cause the outcome? If the answer is a resounding yes, then sure…  we can say that we “blame the victim”.

It’s obviously a gray area. If a car manufacturer decides that P should mean neutral and N should mean park, and writes about this in their manual and tells the customers as they sign the contract, then I wouldn’t blame an operator for making the mistake. The question is – would a person of “normal intelligence” be more than likely to make the same mistake?

In our industry, not only are we moving the yard-post of what “normal intelligence” means. Some of the most hysterical actors are using the bad practices of the layman and arguing that the equipment, therefore, can’t be used by professionals.

It feels like it’s entirely reasonable to argue no-one should drive 18-wheelers because random people bought modified trucks at suspect prices in a grey market and then went ahead and caused problems for a lot of people.

As professionals, we’re expected to have “higher intelligence” when it comes to handling the equipment. You can’t call yourself “professional” if you have to rely on some hack and his gang to educate you online or through their “university”. And you sure as hell can’t dismiss the usability of a device based on what random amateurs do with it.

So what gives? You have a bunch of people who act like amateurs but feel like “professionals” because they are paying good money for this industry’s equivalent of 4chan and got paid to install a few units here and there.

It seems to me that the hysterical chicken-littles of this industry are conflating their own audiences with what actual professionals are experiencing. E.g. if someone suggests using a non-standard port to “protect their installation”, then you know that the guy is not professional (doesn’t mean he’s not paid, just means he’s not competent).

And that’s at the core of this debacle: people that are incompetent, feel entitled to be called professionals, and when they make mistakes that pros would never make, it’s the fault of the equipment and it’s not suitable for professionals either.

So, as I’ve stated numerous times, I have a Hikvision and an Axis camera sitting here on my desk. Both have default admin passwords, yet I have not been the victim of any hack – ever. The Hikvision camera has decent optics (for a surveillance camera) and provides an acceptable image at a much lower cost than the “more secure” option.

And I’ll agree that getting video from that camera to my phone, sans VPN is not “easy” for the layman. But it doesn’t have to be. It just has to be easy for the thousands of competent integrators know what to do, and more importantly, what not to do.

That said; the PoC of the HikVision authentication bypass string should cause heads to roll at Hikvisions (and Dahuas) R&D department. Either there’s no code-review (bad) or there was, and they ignored it (even worse). There’s just no excuse for that kind of crap to be present in the code. Certainly not at this day and age.

 

Password Security

When you’re dealing with user passwords, the site owner does not (or should not) want to know the actual password the user enters. A very good reason for not wanting to know the actual password is that if the database is leaked, in one way or the other, whoever gets hold of the database won’t know the passwords.

Hashing

What you do instead, is to save a hash of the password. A hash is a kind of checksum, so that for a given input, you get a fixed length output value. A very simple (and useless) hash is to just add the ascii-values of each char together, taking modulo 256 of the sum.

So, when the user enters “23456” as his password, you calculate the sum of the ascii-values ( 50 + 51 + 52 + 53 + 54 ) = 260, take the modulo 256 of 260, we get “4” as the checksum, we then store the “4” in the database, instead of the “23456” string.

Username Password-Hash
Morten   4

The next time, the user comes along, we do the same calculation, and compare the results. If the result is “4”, the user gets access. If the user, by a mistake, entered “23457” we’d get the hash of “5” and we’d reject the user.

But wait a minute, the astute reader yells out, banging his fist on the table: “the password “65432” would give the exact same hash!”. And the reader would be correct. This is known as collision, and is why some hashes are good, and others are bad. In my idiot hash algorithm, it is completely trivial for someone to find a combination of letters that give “4” as the output.

Instead of a useless hash, you might use some that are considered “good”. The SHA family of hashes are generally considered the gold standard of hashes. Bitcoin, for example, uses SHA-256 to provide Proof of Work.

Salting

So, let’s say we pick SHA-1, and we store the output of that. In that case we’d get

SHA1( "23456" ) = c24d0a1968e339c3786751ab16411c2c24ce8a2e

But what if two users have the same password? Consider these two rows in the db

Username    Password-Hash
Morten      c24d0a1968e339c3786751ab16411c2c24ce8a2e
John        c24d0a1968e339c3786751ab16411c2c24ce8a2e

If I know the password of “Morten”, I also now know the password of “John”.

What you do, instead, is to add a “salt”. The salt is just a random sequence of strings that I append to the password before computing the hash. For example, with salts, we’d get

Username    Password-Hash                               Salt
Morten      ac5740fde13da84ba4a5266ce9e9b7d697e0622b    xyz
John        c96bbd1bed0ffa3f5a0098ce7ee568ce6e9d496c    abc

Now it’s not apparent that Morten and John both use “23456” as passwords, and we’re almost done….

Brute Force Attacks

In my bad hashing algorithm, it’s pretty clear that you can’t guess my password from knowing the hash value “4”. On one hand it means that other users, might easily get access to an account on the site, but on the other hand, it also means that they can’t guess the original password.

This means that even if they could get access to an account on the site using the (false) password “65432”, they probably wouldn’t be able to access the users gmail account, because it uses a different security model, and in that case the “65432” just wouldn’t work.

However, if the site uses SHA1, the chance of collision is quite low, which means that if I can find an input string that gives the same SHA1 there’s a very good chance that I found the actual original password, and if the user reused the password on other sites, I might be able to gain access to those too.

Brute force attacks don’t actually try every conceivable input, instead it uses something known as “rainbow tables”. These are tables of the most common passwords, As GPU’s improve, the number of SHA1 computations we can make in a given time increases. For example, a new NVidia GTX 1080 TI will do 11374.1 MH/s

In other words, SHA1 salted passwords are not safe, and they are certainly not safe if they occur in a rainbow table somewhere, and there is plenty of software available to accomplish this, hashcat being one.

What To Do?

If you’re reading this, you probably aren’t using either “password” or “123456” as passwords (or are you John?). Furthermore, if you are using “123456”, then you probably are also using the same password for multiple logins, and chances are your other accounts have already been breached.

Two-factor authentication goes a long way to remedy the situation; if the user logs in from a new IP (meaning outside a 255.255.255.0 subnet of known verified ips), then the 2nd stage kicks in, and you need to authenticate over email or SMS. However, this doesn’t work too well if the user uses “123456” all over the place, because the attacker might already have access to your email account (especially if the email account is your username on the site).

Enforcing “good” passwords on the site is also an improvement. You don’t have to go nuts on the requirements that it has to have special chars, upper and lower case etc. The site could actually generate the password for you. This way it would be unique, and hard to guess, if the site was breached, only the site would be affected, and if the site is just a TMZ style rag, the damage would not be too bad.