CVE-2021-24019

Exploit FortiClient EMS 6.2.6 - Authentication Bypass Exploit

Overview

This script automates session token validation to test if authentication can be bypassed in FortiClient EMS 6.2.6. The user provides the target, and the script checks a list of session tokens for valid access.

---

Usage Instructions

1. Update tokens.txt with session tokens. Example:

csrftoken=example123... sessionid=abcdef123...

2. Run the script:

python exploit.py

3. Enter the target URL when prompted.

4. If a valid token is found, access is granted.

---

Legal Disclaimer

This script is for educational purposes only. Unauthorized testing on systems without explicit permission is illegal.