CVE-2022-39952

CVE-2022-39952 影响 Fortinet FortiNAC 的 CVE-2022-39952 漏洞利用 PoC 该漏洞利用的默认配置会写入一个 cron 作业以创建反弹 shell。请务必根据您的环境修改 payload 文件。 技术分析 关于漏洞的技术根本原因分析及入侵指标，请参阅我们的博客： https://www.horizon3.ai/fortinet-fortinac-cve-2022-39952-deep-dive-and-iocs 摘要 该 PoC 利用 keyUpload.jsp 端点实现任意文件写入。 使用方法 root@kitploit:...

Exploit for External Control of File Name or Path in Fortinet Fortinac

CVE-2022-39952 POC for CVE-2022-39952 affecting Fortinet Forti...

Fortinet FortiNAC keyUpload.jsp arbitrary file write

This module uploads a payload to the /tmp directory in addition to a cron job to /etc/cron.d which executes the payload in the context of the root user. The core vulnerability is an arbitrary file write issue in /configWizard/keyUpload.jsp which is accessible remotely and without authentication...