CVE-2024-55591

FortiGate CVE-2024-55591 1Scan Latest Version https://github.com/0x7556/1Scan Affected Versions FortiOS 7.0.0 through 7.0.16 FortiProxy 7.0.0 through 7.0.19 FortiProxy 7.2.0 through 7.2.12 POC Single Detection ./poc 10.10.1.1 ./poc http://10.10.1.1 1Scan Batch ./1scan 10.10.1.1 ./1scan 10.10.1.1/...

Fortinet FortiOS - Open Redirect/Cross-Site Scripting

FortiOS Web User Interface in 5.0.x before 5.0.13, 5.2.x before 5.2.3, and 5.4.x before 5.4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks or cross-site scripting attacks via the "redirect" parameter to "login." id: CVE-2016-3978 info: name: Fortin...

CVE-2022-42475

CVE-2022-42475 Background This is the exploit for the blog post here: https://bishopfox.com/blog/exploit-cve-2022-42475 Redacted Version This version of the exploit will not work without you, the hacker, supplying the necessary memory addresses for ROP gadgets, etc. The work to determine these da...

FortiOS-Credentials-Disclosure

FortiOS-Credentials-Disclosure CVE-2018-13379 Exploit Usage : python CVE-2018-13379.py list.txt...

Multi-threaded-mass-exploiter-CVE-2018-13379-POC

CVE-2018-13379 — Mass Exploit for Fortinet FortiOS SSL VPN A tool for mass exploitation of the CVE-2018-13379 path traversal vulnerability in Fortinet FortiOS SSL VPN. Allows reading session files and extracting logins and passwords in cleartext. Features Exploitation of CVE-2018-13379 via the...

fortios-auth-bypass-poc-CVE-2024-55591

CVE-2024-55591 A Fortinet FortiOS Authentication Bypass Vulnerable PoC Description Use this poc,you can bypass authentication and see system log USEAGE sysirq@sysirq-machine:/Work/Fortinet/FortiGate7016/CVE-2024-55591$ python3 poc.py usage: poc.py -h --target TARGET --port PORT poc.py: error: the...

CVE-2024-21754-Forti-RCE

FortiOS and FortiProxy Password Hashing Vulnerability to RCE CVE-2024-21754 Overview A critical vulnerability, classified as CVE-2024-21754, has been identified in FortiOS and FortiProxy versions up to 7.4.3, 7.2, 7.0, 6.4, and 2.0. This vulnerability, categorized under CWE-916, involves the use ...

CVE-2022-40684

CVE-2022-40684 Utilities for exploiting vulnerability CVE-2022-40684 FortiOS / FortiProxy / FortiSwitchManager - Authentication bypass on administrative interface...

CVE-2024-21762-Safe-Check

CVE-2024-21762 - FortiOS SSL VPN Out-of-Bounds Write Overview Field| Value ---|--- CVE| CVE-2024-21762 Advisory| FG-IR-24-015 CVSS| 9.8 Critical CWE| CWE-787 Out-of-bounds Write CISA KEV| Yes - actively exploited in the wild Attack Vector| Network unauthenticated Affected Component| sslvpnd SSL V...

CVE-2024-55591

CVE-2024-55591 PoC This repository contains an PoC Proof of Concept for CVE-2024-55591 , a critical authentication bypass vulnerability discovered in Fortinet's FortiOS and FortiProxy products. Vulnerability Overview CVE-2024-55591 is an authentication bypass vulnerability caused by an alternativ...

fortios-ldap-mitm-poc-CVE-2019-5591

CVE-2019-5591 This Proof of Concept PoC demonstrates a MITM Man-In-The-Middle Attack: impersonation of an LDAP server on the local subnet of a FortiGate device running a vulnerable version of FortiOS. Affected Versions These versions are vulnerable: Version| Affected| Solution ---|---|--- FortiOS...

CVE-2022-40684

CVE-2022-40684 CVSS score: 9.6 POC for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager appliances. Vulnerable Products FortiOS versions between 7.0.0 – 7.0.6 and 7.2.0 – 7.2.1 FortiProxy versions between 7.0.0 – 7.0.6 and version 7.2.0 FortiSwitchManager versions 7.0...

cve-2024-55591-poc

CVE-2024-55591 - Fortinet FortiOS Authentication Bypass An educational implementation in Go demonstrating the technical mechanics of CVE-2024-55591 , an authentication bypass vulnerability affecting Fortinet FortiOS. This repository is intended strictly for security research, defensive analysis,...

fortios-auth-bypass-exploit-CVE-2024-55591

CVE-2024-55591 A Fortinet FortiOS Authentication Bypass Vulnerable Exploit Description Use this exp,you can bypass authentication and run cmd USEAGE sysirq@sysirq-machine:/Work/Fortinet/FortiGate7016/CVE-2024-55591$ python3 exp.py usage: exp.py -h --target TARGET --port PORT --username USERNAME...

cve-2024-23113-test-env

CVE-2024-23113 FortiOS Test Environment A Docker-based test environment for validating CVE-2024-23113 Nuclei templates against simulated vulnerable FortiOS instances. 🔍 Overview This environment simulates vulnerable FortiOS HTTP interfaces to test the detection capabilities of CVE-2024-23113 Nucl...

Fortinet FortiOS < 5.6.0 - Cross-Site Scripting

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to Execute unauthorized code or commands via the action input during the activation of a FortiToken. id: CVE-2017-3132 info: name: Fortinet FortiOS 5.6.0 - Cross-Site Scripting author: ritikchaddh...

FortiOS 5.4.0 to 5.6.0 - Cross-Site Scripting

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 and 5.6.0 allows attackers to execute unauthorized code or commands via the filter input in "Applications" under FortiView. id: CVE-2017-3131 info: name: FortiOS 5.4.0 to 5.6.0 - Cross-Site Scripting author:...

Fortinet FortiOS < 5.6.0 - Cross-Site Scripting

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to execute unauthorized code or commands via the Replacement Message HTML for SSL-VPN. id: CVE-2017-3133 info: name: Fortinet FortiOS 5.6.0 - Cross-Site Scripting author: ritikchaddha severity:...

CVE-2018-13382

CVE-2018-13382 CVE-2018-13382 https://devco.re/blog/2019/08/09/attacking-ssl-vpn-part-2-breaking-the-Fortigate-ssl-vpn/ An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5.4.1 to 5.4.10 under SSL VPN web portal allows an unauthenticated attacker to...

fortios-auth-bypass-poc-CVE-2024-55591

CVE-2024-55591 A Fortinet FortiOS Authentication Bypass Proof of Concept See our blog post for technical details Detection in Action python CVE-2024-55591-PoC.py --host 192.168.1.5 --port 443 --command "get system status" --user watchTowr --ssl / | | |\ \ \ / / \ \ / | | \| | / \ / / \ \ \ /...