vamp-forticheck

VampSecure Labs — Security Research Division
Critical vulnerability scanner for FortiOS/FortiGate devices.

Description

Security auditing tool to assess the exposure of Fortinet devices to four publicly documented critical vulnerabilities. Designed exclusively for use in authorized environments (penetration testing, Red Team, contracted audits).

Performs asynchronous detection of multiple targets concurrently using AsyncIO and aiohttp, with Rich console output and report generation in JSON and HTML.

Analyzed CVEs

Requirements

• Python 3.9+
• Dependencies: aiohttp>=3.9.0, rich>=13.7.0

Installation

python3 -m venv .venv
source .venv/bin/activate
pip install -r requirements.txt

Usage

# Escanear un único objetivo
python3 vamp_forticheck.py https://fortigate.ejemplo.com

# Escanear múltiples objetivos desde fichero
python3 vamp_forticheck.py -f scope.txt

# Limitar concurrencia y generar informe
python3 vamp_forticheck.py -f scope.txt --concurrency 5 --output-json informe.json --output-html informe.html

Options

Output

The tool generates a Rich table in the console with the result of each CVE per target, indicating VULNERABLE, PARCHADO, NO APLICA or ERROR. HTML reports include dark styling with technical details and an indicative PoC template.

Legal notice

Exclusive use on systems you own or with written authorization from the owner.
Unauthorized use may constitute a crime. VampSecure Studios is not responsible for the misuse of this tool.

© VampSecure Studios — VampSecure Labs Security Research Division
License: MIT