Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
fortigate-cve-2022-40684-tool — FortiGate CVE-2022-40684 assessment tool for user enumeration, configuration dump, and lab testing. | Kitploit
Tools/GitHubGitHub/pintukumar-sutradhar/fortigate-cve-2022-40684-tool
Vulnerability ScannersExploitationWeb Application ExploitationPenetration TestingLearning & EducationLabs & Practice
GitHubpintukumar-sutradhar/fortigate-cve-2022-40684-tool

fortigate-cve-2022-40684-tool

FortiGate CVE-2022-40684 assessment tool for user enumeration, configuration dump, and lab testing.

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
View Repository
14 months agoNot yet reviewed

Description

This tool allows security professionals to identify and validate exposure to CVE-2022-40684 in FortiGate devices by interacting with exposed CMDB API endpoints.

It supports enumeration of administrative users, user groups, and selective configuration extraction for analysis in controlled environments.

Features

  • Vulnerability detection
  • Admin user enumeration
  • Local user and group enumeration
  • Targeted configuration dumping
  • Lab-safe testing utilities

Vulnerability Details

  • CVE: CVE-2022-40684
  • Type: Authentication Bypass
  • Affected Products: FortiGate / FortiOS
  • Impact: Unauthorized access to administrative API endpoints

Requirements

  • Python 3.x
  • requests
  • prettytable

Install dependencies: pip3 install -r requirements.txt

Usage

  • Check vulnerability:
    python3 fortigate_tool.py -t <target>

  • Enumerate users:
    python3 fortigate_tool.py -t <target> --enum

  • Dump specific endpoint:
    python3 fortigate_tool.py -t <target> --dump /api/v2/cmdb/system/admin

  • Dump multiple important configurations:
    python3 fortigate_tool.py -t <target> --dump-all

Output

Dumped configurations are stored locally in: fortigate_dump/

Disclaimer

This tool is intended for educational purposes and authorized security testing only. Do not use this tool on systems without explicit permission. The author is not responsible for any misuse or damage caused by this tool.

Download Tool