
FortiGate CVE-2022-40684 assessment tool for user enumeration, configuration dump, and lab testing.
This tool allows security professionals to identify and validate exposure to CVE-2022-40684 in FortiGate devices by interacting with exposed CMDB API endpoints.
It supports enumeration of administrative users, user groups, and selective configuration extraction for analysis in controlled environments.
Install dependencies: pip3 install -r requirements.txt
Check vulnerability:
python3 fortigate_tool.py -t <target>
Enumerate users:
python3 fortigate_tool.py -t <target> --enum
Dump specific endpoint:
python3 fortigate_tool.py -t <target> --dump /api/v2/cmdb/system/admin
Dump multiple important configurations:
python3 fortigate_tool.py -t <target> --dump-all
Dumped configurations are stored locally in: fortigate_dump/
This tool is intended for educational purposes and authorized security testing only. Do not use this tool on systems without explicit permission. The author is not responsible for any misuse or damage caused by this tool.