cve-2019-6693

FortiGate Password Decrypt Script - CVE-2019-6693 🔐 An authorized remote user with access or knowledge of the standard encryption key could gain access and decrypt the FortiOS backup files and all non-administrator passwords, private keys, and High Availability HA passwords. Overview This Python...

hitron-cfg-decrypter

Hitron CFG Decrypter ダウンロード root@kitploit: git clone https://github.com/Manouchehri/hitron-cfg-decrypter cd hitron-cfg-decrypter/ 復号化 root@kitploit: python decrypt.py -i sample.cfg.enc 暗号化 root@kitploit: python decrypt.py -i sample.cfg.dec -m encrypt CFGを取得する Michael Henke @henkman がHitron...

CVE-2020-9289

解密 FortiManager 配置密钥 CVE-2020-9289 CVE-2020-9289 和 CVE-2019-6693 与相同的默认硬编码密钥相关。 在 FortiManager/FortiAnalyzer 中实现的解密例程的唯一区别是： IV 处理（所有 16 个字节在数字加密数据之前提供）。 最后一个加密块从输出中剥离，因此需要附加垃圾数据，然后从明文中移除。 详情请参见 https://www.fortiguard.com/psirt/FG-IR-19-007。...

EUVD-2019-16191

Malware in sbrugna...

EUVD-2020-19704

Malware in sbrugna...

Design/Logic Flaw

On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, under certain circumstances, attackers can decrypt configuration items that are encrypted because the vCMP configuration unit key is generated with insufficient randomness. The attack prerequisite is direct access to...

CVE-2019-6632

CVE-2019-6632 affects BIG-IP vCMP: the vCMP configuration unit key is generated with insufficient randomness, enabling decryption of encrypted configuration/UCS files when an attacker has direct access to those files. Affected: BIG-IP versions 12.1.0–12.1.4, 13.0.0–13.1.1.4, 14.0.0–14.0.0.4/14.0....