CVE-2019-6693

CVE-2019-6693 ¿Has cambiado tus claves de cifrado predeterminadas de FortiGate? ¡Ejecuta este script y descúbrelo! Puedes proporcionar el volcado completo del archivo de configuración o valores cifrados individuales. Si los valores descifrados no son una completa tontería o producen una palabra,...

hitron-cfg-decrypter

Descifrador de CFG Hitron Descarga root@kitploit: git clone https://github.com/Manouchehri/hitron-cfg-decrypter cd hitron-cfg-decrypter/ Descifrado root@kitploit: python decrypt.py -i sample.cfg.enc Cifrado root@kitploit: python decrypt.py -i sample.cfg.dec -m encrypt Obteniendo el CFG Gracias a...

CVE-2020-9289

Entschlüsseln von FortiManager-Konfigurationsgeheimnissen CVE-2020-9289 CVE-2020-9289 und CVE-2019-6693 beziehen sich auf denselben Standard- und hartcodierten Schlüssel. Die einzigen Unterschiede in der in FortiManager/FortiAnalyzer implementierten Entschlüsselungsroutine sind: Die IV-Behandlung...

EUVD-2019-16191

Malware in sbrugna...

EUVD-2020-19704

Malware in sbrugna...

Design/Logic Flaw

On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, under certain circumstances, attackers can decrypt configuration items that are encrypted because the vCMP configuration unit key is generated with insufficient randomness. The attack prerequisite is direct access to...

CVE-2019-6632

CVE-2019-6632 affects BIG-IP vCMP: the vCMP configuration unit key is generated with insufficient randomness, enabling decryption of encrypted configuration/UCS files when an attacker has direct access to those files. Affected: BIG-IP versions 12.1.0–12.1.4, 13.0.0–13.1.1.4, 14.0.0–14.0.0.4/14.0....