fgt-cve-2023-27997-exploit

fgt-cve-2023-27997-exploit FortiGate SSL‑VPN CVE‑2023‑27997 취약점 PoC 익스플로잇 스크립트 ROP 체인 포함 목차 설명 영향받는 버전 설치 사용법 예제 출력 기술 세부사항 경고 참고 자료 설명 fgt-cve-2023-27997-exploit.py는 Fortinet FortiGate 장치에서 발견된 중요 취약점 CVE‑2023‑27997 에 대한 Proof‑of‑Concept PoC 익스플로잇 스크립트입니다. 이 취약점은 FortiOS SSL‑VPN 인터페이스에서 인증 없이 원격...

Fortigate-SSL-VPN-Exploit-Kit

FortiGate SSL-VPN kit восстановлен в дикой природе Исследовательский архив. Восстановлен в том виде, в каком был найден. Я не писал эти файлы. Опубликовано: 1 сентября 2026 года Этот репозиторий — оркестратор, полезные нагрузки второй стадии и операторские слушатели , которые работают поверх...

cve-2024-21762-checker

FortiGate cve-2024-21762-checker 이 스크립트는 CVE-2024-21762에 기반한 Fortigate SSL VPN의 취약점을 확인하는 데 사용됩니다. Shodan을 사용하여 취약한 장치를 찾고 취약 여부를 테스트합니다. 기능 Shodan API를 사용하여 포트 10443에서 SSL VPN을 실행하는 Fortigate 장치를 검색합니다. 장치의 취약점 상태를 확인합니다. 유연한 Shodan 쿼리 조직 및 국가와 같은 추가 정보와 함께 결과를 표시합니다. 요구 사항 Python 3.x Shodan API...

CVE-2024-21762

CVE-2024-21762 - FortiGate SSL VPN RCE Detection & Exploitation Tool Detection and exploitation tool for CVE-2024-21762 - Critical FortiGate SSL VPN vulnerability ⚠️ LEGAL DISCLAIMER : This tool is for authorized test environments only. Unauthorized use on systems is ILLEGAL and may result in...

cve-2024-21762-check

CVE-2024-21762 Check Safely detect whether a FortiGate SSL VPN is vulnerable to CVE-2024-21762. For more information, see this Bishop Fox blog post Usage root@kitploit: python3 check-cve-2024-21762.py In most cases, the script will either output "Vulnerable" or "Patched". It performs minimal...

CVE-2018-13379

CVE-2018-13379 - FortiGate SSL-VPN Path Traversal PoC Description Proof-of-Concept script for CVE-2018-13379, a critical path traversal vulnerability in Fortinet FortiGate SSL VPN web portal. This vulnerability allows unauthenticated attackers to download system files via specially crafted HTTP...

CVE-2023-27997-check

Strumento di Valutazione della Vulnerabilità CVE-2023-27997 Rileva in modo sicuro se un'istanza FortiGate SSL VPN è vulnerabile a CVE-2023-27997 basandosi sui tempi di risposta. Vedi il rapporto completo sul blog di Bishop Fox, inclusa una guida completa della metodologia alla base di questo...

CVE-2020-12819

A heap-based buffer overflow vulnerability in the processing of Link Control Protocol messages in FortiGate versions 5.6.12, 6.0.10, 6.2.4 and 6.4.1 and earlier may allow a remote attacker with valid SSL VPN credentials to crash the SSL VPN daemon by sending a large LCP packet, when tunnel mode i...

Microsoft Warns of Ransomware Attacks by Iranian Phosphorus Hacker Group

Microsoft's threat intelligence division on Wednesday assessed that a subgroup of the Iranian threat actor tracked as Phosphorus is conducting ransomware attacks as a "form of moonlighting" for personal gain. The tech giant, which is monitoring the activity cluster under the moniker DEV-0270 aka...

Protect

An insufficient verification of data authenticity vulnerability CWE-345 in the user interface of FortiProxy and FortiGate SSL VPN portal may allow a remote, unauthenticated attacker to conduct a cross-site request forgery CSRF attack . Only SSL VPN in web mode or full mode are impacted by this...

FortiOS Path Traversal Credential Gatherer

Fortinet FortiOS versions 5.4.6 to 5.4.12, 5.6.3 to 5.6.7 and 6.0.0 to 6.0.4 are vulnerable to a path traversal vulnerability within the SSL VPN web portal which allows unauthenticated attackers to download FortiOS system files through specially crafted HTTP requests. This module exploits this...

FortiGate SSL VPN Portal 5.x Cross Site Scripting Vulnerability

FortiGate SSL VPN Portal versions 5.6.2 and below, 5.4.6 and below, 5.2.12 and below, and 5.0 and below suffer from a cross site scripting vulnerability. ======================================================================= title: FortiGate SSL VPN Portal XSS Vulnerability product: Fortinet...