From 23a73a7948d2cee242d112bf6777940c0f3d81fc Mon Sep 17 00:00:00 2001
From: grafana-watcher <grafana-watcher@bojemoi.lab>
Date: Thu, 9 Jul 2026 20:29:52 +0200
Subject: [PATCH] post: commit 203d298 in bojemoi

---
 .../commits/2026-07-09-commit-203d298.md      | 41 +++++++++++++++++++
 1 file changed, 41 insertions(+)
 create mode 100644 content/posts/commits/2026-07-09-commit-203d298.md

diff --git a/content/posts/commits/2026-07-09-commit-203d298.md b/content/posts/commits/2026-07-09-commit-203d298.md
new file mode 100644
index 0000000..4b888eb
--- /dev/null
+++ b/content/posts/commits/2026-07-09-commit-203d298.md
@@ -0,0 +1,41 @@
+---
+title: "[bojemoi] feat(runbook): add FortiOS auth bypass CVE-2022-40684 scenario"
+date: 2026-07-09T20:29:52+02:00
+draft: false
+tags: ["commit", "bojemoi", "main"]
+categories: ["Git Activity"]
+summary: "Commit 203d298 par grafana-watcher dans bojemoi"
+author: "grafana-watcher"
+---
+
+## Commit `203d298`
+
+| | |
+|---|---|
+| **Repository** | bojemoi |
+| **Branch** | `main` |
+| **Author** | grafana-watcher |
+| **Hash** | `203d298e612d9e70c36898f9865ce9ff5fa30f69` |
+
+
+### Description
+
+6-phase runbook for FortiOS/FortiProxy admin interface auth bypass
+via forged Forwarded header. Covers recon, detection (API test +
+nuclei), exploitation (SSH key injection, config dump), post-exploit
+(VPN pivot, PKI extraction), and remediation.
+
+Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
+
+### Files Changed
+
+```
+M	samsonov/runbook-generator/main.py
+```
+
+### Diff Summary
+
+```
+ samsonov/runbook-generator/main.py | 87 ++++++++++++++++++++++++++++++++++++++
+ 1 file changed, 87 insertions(+)
+```