real4xor/cve-2019-6693Decrypt FortiGate configuration files and encrypted strings to detect default encryption keys, enabling rapid assessment of CVE-2019-6693 vulnerability.
Have you changed your default FortiGate encryption keys? Run this script and find out! You can provide the entire configuration file dump or individual encrypted values. If the decrypted values aren't complete nonsense or produce a word, then it is likely the encryption key is left as default.
git clone https://github.com/Real4XoR/cve-2019-6693.git
cd cve-2019-6693
pip3 install -r requirements.txt
Provide the entire .conf configuration file:
python3 cve-2019-6693.py --config <File>.conf
You can also provide just the encrypted string:
python3 cve-2019-6693.py --string <ENC String>
Rework of the below script to make it do a few more things.