bishopfox/fortiweb-auth-bypass-check
Bishop Fox의 FortiWeb 인증 우회 스캐너
이 취약점에 대한 자세한 내용은 Bishop Fox 블로그를 참조하세요.
git clone https://github.com/BishopFox/fortiweb-auth-bypass-check
cd fortiweb-auth-bypass-check
python3 -m pip install requests
python3 scan.py https://[TARGET]
# Vulnerable target
$ python3 scan.py https://example1.com
[*] Testing https://example1.com
[!] Target is VULNERABLE - update immediately!
# Unaffected target
$ python3 scan.py https://example2.com
[*] Testing https://example2.com
[+] Target is not affected
# Invalid target
$ python3 scan.py https://example3.com
[*] Testing https://example3.com
[-] Target does not appear to be FortiWeb
이 코드는 MIT 라이선스에 따라 배포됩니다.