CVE-2024-23113

CVE-2024-23113 The script is designed to detect CVE-2024-23113, which is a format string vulnerability in the FortiGate FGFM service FortiGate to FortiManager protocol running on TCP port 541. The vulnerability occurs because an attacker can control a format string, which could lead to Remote Cod...

fortigate-belsen-leak

╔═════════════════════════════════════════════════════════════════════════════╗ ║ ███████╗ ██████╗ ██████╗ ████████╗██╗ ██████╗ █████╗ ████████╗███████╗ ║ ║ ██╔════╝██╔═══██╗██╔══██╗╚══██╔══╝██║██╔════╝ ██╔══██╗╚══██╔══╝██╔════╝ ║ ║ █████╗ ██║ ██║██████╔╝ ██║ ██║██║ ███╗███████║ ██║ █████╗ ║ ║...

CVE-2024-21762

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ CVE-2024-21762...

CVE-2022-40684

CVE-2022-40684 Individual or batch exploit for CVE-2022-40684 How to use Generate public key python3 exp.py -u ip:port -k idrsa2048.pub -l hosts.txt for batch processing with a file FOFA title="FortiGate"...

forticrack_v8

Forticrack v8.0.0 Decrypt and extract FortiOS 8.0.0 firmware images. This script extends Bishop Fox's Forticrack to support 8.0.0 firmware images. Also, RandoriSec's article on FortiGate 7.4.7 firmware encryption was really helpful to reverse the encryption for FortiOS 8.0.0, since it looks like ...

at-doom-fortigate

At Doom Fortigate root@kitploit: ================= =============== =============== ======== ======== \ . . . . . . .\ //. . . . . . .\ //. . . . . . .\ \. . .\// . . // ||. . .. . .|| ||. . .. . .|| ||. . .. . .|| || . . ./ . . .|| || . .|| ||. . || || . .|| ||. . || || . .|| ||. . || ||...

fgt-cve-2023-27997-exploit

fgt-cve-2023-27997-exploit FortiGate SSL‑VPN CVE‑2023‑27997 Exploit PoC Script with ROP Chain Table of Contents Description Affected Versions Installation Usage Example Output Technical Details Warnings References Description fgt-cve-2023-27997-exploit.py is a Proof‑of‑Concept PoC exploit script...

Fortigate-Belsen-Leak-Dump-CVE-2022-40684-

Fortigate-Belsen-Leak-Dump-CVE-2022-40684 How This Script Works: 1. The script goes through all subfolders under rootfolder and looks for vpn-passwords.txt. 2.Skips any lines with the banner '-=-= Belsen Group -=-=.' 3. For lines with the username:password format Extracts the part after the colon...

fortiscan

Fortiscan CVE-2018-13379 FG-IR-18-384 Exploitation Tool, You can use this tool to check the vulnerability in your FortiGate SSL-VPN. This vulnerability affects the following versions: • FortiOS 6.0 - 6.0.0 to 6.0.4 • FortiOS 5.6 - 5.6.3 to 5.6.7 • FortiOS 5.4 - 5.4.6 to 5.4.12...

CVE-2019-6693

CVE-2019-6693 Decrypt FortiGate configuration secrets Original advisory Vendor advisory For Fortigate VM/appliances below versions 6.2.0, 6.0.0 to 6.0.6, 5.6.10 configuration secrets are stored encrypted with a unique key. For versions above the non-default private-data-encryption parameter lets...

FortiOS - Insecure LDAP Configuration Detection

The FortiGate LDAP configuration was detected to be insecure due to missing ca-cert, secure LDAPS, or server-identity-check, potentially exposing LDAP communications to credential interception or man-in-the-middle attacks under specific network conditions. id: CVE-2019-5591 info: name: FortiOS -...

FortiGate FortiOS SSL VPN Web Portal - Cross-Site Scripting

FortiGate FortiOS through SSL VPN Web Portal contains a cross-site scripting vulnerability. The login redir parameter is not sanitized, so an attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal...

gotigate

gotigate CVE-2022-40684 のエクスプロイト インストール root@kitploit: ▶ go install github.com/gustavorobertux/gotigate@latest 基本的な使い方 root@kitploit: ▶ gotigate TARGET IP or youraddress.com "height":1, "interface":"", "csf-device":"", "table-visualization":"", "device-list-online":"", "device-list-telemetry":"",...

cve-2024-55591-poc

CVE-2024-55591 - Fortinet FortiOS 認証バイパス CVE-2024-55591 （Fortinet FortiOS に影響する認証バイパス脆弱性）の技術的メカニズムを実演する、Go で書かれた教育目的の実装です。このリポジトリは、セキュリティ研究、防御的分析、および許可されたペネトレーションテストのみを目的としています。 動作の仕組み このツールは、脆弱性のワークフローを反映した2つの主要フェーズ（ターゲット検証と悪用）で構成されています。 フェーズ 1: ターゲット検証と検出 1. 管理インターフェースのプロービング: /login?redir=/ng...

CVE-2024-23113

CVE-2024-23113 This python scripts searches a client list to see if their FortiGate device is vulnerable to this CVE. How To Use 1. Create a "clients.txt" file, and import a list of all your clients IP addresses. 2. Create a "vul.txt" file. This will be used to export the scripts findings. 3. Run...

CVE-2023-27997

CVE-2023-27997 FortiGate VM64 7.2.0 はこのコードで攻撃可能です。（注意：コードは非常に馬鹿げた方法で書かれています。） 概念実証 root@kitploit: $ python3 exploit.py 192.168.106.142 10443 192.168.106.143 9999 + generating shellcode + salt=b'25c2dcf2' + processing hash + finding hash in cache - not in cache + computing + loading + heap spray +...

cve-2019-6693

FortiGate パスワード復号スクリプト - CVE-2019-6693 🔐 標準の暗号化キーにアクセスできる、またはその知識を持つ認可されたリモートユーザーは、FortiOS バックアップファイル、およびすべての非管理者パスワード、秘密鍵、High Availability（HA）パスワードにアクセスして復号化できる可能性があります。 概要 この Python スクリプトは、FortiGate の暗号化方式で暗号化されたパスワードを復元するために設計されています。FortiOS 設定ファイルに保存されているユーザーパスワードと High...

cve-2024-21762-check

CVE-2024-21762 Check Safely detect whether a FortiGate SSL VPN is vulnerable to CVE-2024-21762. For more information, see this Bishop Fox blog post Usage root@kitploit: python3 check-cve-2024-21762.py In most cases, the script will either output "Vulnerable" or "Patched". It performs minimal...

CVE-2024-23113

CVE-2024-23113 The script is designed to detect CVE-2024-23113, which is a format string vulnerability in the FortiGate FGFM service FortiGate to FortiManager protocol running on TCP port 541. The vulnerability occurs because an attacker can control a format string, which could lead to Remote Cod...

CVE-2021-44168

Exploit for CVE-2021-44168 Purpose Exploit CVE-2021-44168 to drop a shell on a Fortigate firewall and enable its access via LDPRELOAD tricks that execute when running some of Fortigate's CLI commands. You get a root shell. Use Compile: root@kitploit: gcc -o gensrc-vispkgfile gensrc-vispkgfile.c -...