CVE-2019-11510_poc

CVE-2019-11510 PoC Python script to exploit CVE-2019-11510 and read '/etc/passwd' file Pulse Secure 8.1R15.1/8.2/8.3/9.0 SSL VPN - Arbitrary File Disclosure vulnerability USAGE: python3 CVE-2019-11510.py...

CVE-2024-21762_FortiNet_PoC

CVE-2024-21762FortiNetPoC Proof-of-concept scanner targeting CVE-2024-21762 in FortiOS SSL VPN’s /remote/hostcheckvalidate endpoint with reverse shell payload delivery. Here’s a GitHub-style writeup for your project, including a clean and concise summary, a usage guide, and context on how it fits...

CVE-2021-20038-SonicWall-RCE

SonicWallSSL-VPNRCE CVE-2021-20038 Command-line parameters -h View help -u Specify url -f Specify file Entries in the file must include the http/https prefix...

Fortinet FortiOS < 5.6.0 - Cross-Site Scripting

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to execute unauthorized code or commands via the Replacement Message HTML for SSL-VPN. id: CVE-2017-3133 info: name: Fortinet FortiOS 5.6.0 - Cross-Site Scripting author: ritikchaddha severity:...

CVE-2018-13382

CVE-2018-13382 CVE-2018-13382 https://devco.re/blog/2019/08/09/attacking-ssl-vpn-part-2-breaking-the-Fortigate-ssl-vpn/ An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5.4.1 to 5.4.10 under SSL VPN web portal allows an unauthenticated attacker to...

VisualDoor

VisualDoor Exploit de SonicWall SSL-VPN, utilizado por Phineas Fisher para hackear el Cayman Trust Bank y Hacking Team. No autenticado, te da un shell de 'nobody'. Obtener root es un ejercicio para el usuario. Para más detalles ver:...

VisualDoor

VisualDoor SonicWall SSL-VPN Exploit, as used by Phineas Fisher to hack Cayman Trust Bank and Hacking Team. Unauthenticated, gives you a "nobody" shell. Getting root is an exercise for the user. For details see: https://darrenmartyn.ie/2021/01/24/visualdoor-sonicwall-ssl-vpn-exploit/...

CVE-2019-11510-1

CVE-2019-11510-1 Exploit for Arbitrary File Read on Pulse Secure SSL VPN CVE-2019-11510 python usage: python CVE-2019-11510.py https://x.x.x.x 参考链接： https://hackerone.com/reports/591295 https://github.com/projectzeroindia/CVE-2019-11510...

pulsexploit

pulsexploit Automated script for Pulse Secure SSL VPN exploit CVE-2019-11510 using hosts retrieved from Shodan API. You must have a Shodan account to use this script. Click here if you don't have Shodan account. Installation 1. Install dependencies. CentOS & Fedora yum install git python3 -y Ubun...

CVE-2018-13379

🛡️ CVE-2018-13379 - Fortinet SSL VPN Vulnerability 🔍 Overview CVE-2018-13379 is a critical path traversal vulnerability in Fortinet FortiOS SSL VPN. It allows attackers to download VPN web session files and extract sensitive information. Impact: Information disclosure usernames, session tokens...

CVE-2019-11510-poc

CVE-2019-11510-poc Pulse Secure SSL VPN pre-auth file reading Reference 1. https://hackerone.com/reports/591295 2. https://github.com/projectzeroindia/CVE-2019-11510/blob/master/CVE-2019-11510.sh 3...

fortiscan

Fortiscan CVE-2018-13379 FG-IR-18-384 Herramienta de explotación, Puede usar esta herramienta para verificar la vulnerabilidad en su FortiGate SSL-VPN. Esta vulnerabilidad afecta las siguientes versiones: • FortiOS 6.0 - 6.0.0 a 6.0.4 • FortiOS 5.6 - 5.6.3 a 5.6.7 • FortiOS 5.4 - 5.4.6 a 5.4.12...

fortiscan

Fortiscan CVE-2018-13379 FG-IR-18-384 Exploitation Tool, You can use this tool to check the vulnerability in your FortiGate SSL-VPN. This vulnerability affects the following versions: • FortiOS 6.0 - 6.0.0 to 6.0.4 • FortiOS 5.6 - 5.6.3 to 5.6.7 • FortiOS 5.4 - 5.4.6 to 5.4.12...

CVE-2024-9474

PAN-OS CVE-2024-0012 and CVE-2024-9474 Python script generated from the blog post : https://labs.watchtowr.com/pots-and-pans-aka-an-sslvpn-palo-alto-pan-os-cve-2024-0012-and-cve-2024-9474/?123 It's all described there My comment on X : https://x.com/k4nfr3/status/1858993646923903103 reverse shell...

at-doom-fortigate

At Doom Fortigate ================= =============== =============== ======== ======== \ . . . . . . .\ //. . . . . . .\ //. . . . . . .\ \. . .\// . . // ||. . .. . .|| ||. . .. . .|| ||. . .. . .|| || . . ./ . . .|| || . .|| ||. . || || . .|| ||. . || || . .|| ||. . || ||. . . . . . . ||...

Fortigate-SSL-VPN-Exploit-Kit

FortiGate SSL-VPN kit recovered in the wild Research archive. Recovered as found. I did not write these files. Released: 1 September 2026 This repository is the orchestrator, second-stage payloads, and operator listeners that sit on top of a per-SKU FortiGate SSL-VPN exploit catalog. The long-for...

CVE-2024-3400-poc

PoC de la vulnerabilidad CVE-2024-3400 herramienta de verificación Descripción de la vulnerabilidad CVE-2024-3400 es una vulnerabilidad de inyección de comandos presente en los sistemas de firewall de Palo Alto. Un atacante, mediante una solicitud HTTP cuidadosamente elaborada, puede ejecutar...

CVE-2024-3400

CVE-2024-3400 CVE-2024-3400 Palo Alto OS Command Injection send this HTTP request: POST /ssl-vpn/hipreport.esp HTTP/1.1 Host: 127.0.0.1 Cookie: SESSID=/../../../var/appweb/sslvpndocs/global-protect/portal/images/hellome1337.txt; Connection: close Content-Type: application/x-www-form-urlencoded...

cve-2024-21762-poc

cve-2024-21762-poc CVE-2024-21762 es una vulnerabilidad crítica en los productos FortiOS y FortiProxy de Fortinet, presente en su componente SSL VPN. Esta vulnerabilidad permite a un atacante remoto no autenticado ejecutar código o comandos arbitrarios en el sistema objetivo mediante solicitudes...

CVE-2023-27997-Check

CVE-2023-27997-Check Fofa Query : app="FORTINET-SSLVPN" Install $ git https://github.com/imbas007/CVE-2023-27997-Check.git $ cd CVE-2023-27997-check $ pip3 install -r requirements.txt Usage usage: CVE-2023-27997.py -h -u URL | -f FILELIST options: -h, --help show this help message and exit -u URL...