Recently Fortinet confirmed there was a backdoor in their firewalls which impacted FortiGate OS Version 4.x - 5.0.7. An exploit was released in the wild but it took some efforts to work with (I am looking at you : paramiko/termios/msvcrt). So I ported the code to create a quick and dirty password calculator that will help in pwning Fortinet firewalls with vulnerable versions.
Tested it on test firewalls and it works like a charm : )
https://packetstormsecurity.com/files/136430/Fortigate-Backdoor-Password-Calculator.html
Tested it on test firewalls and it works like a charm : )
https://packetstormsecurity.com/files/136430/Fortigate-Backdoor-Password-Calculator.html
0 comments:
Need to say something ? Spell it out :)