post: commit 203d298 in bojemoi

content/posts/commits/2026-07-09-commit-203d298.md

@@ -0,0 +1,41 @@
+---
+title: "[bojemoi] feat(runbook): add FortiOS auth bypass CVE-2022-40684 scenario"
+date: 2026-07-09T20:29:52+02:00
+draft: false
+tags: ["commit", "bojemoi", "main"]
+categories: ["Git Activity"]
+summary: "Commit 203d298 par grafana-watcher dans bojemoi"
+author: "grafana-watcher"
+---
+
+## Commit `203d298`
+
+| | |
+|---|---|
+| **Repository** | bojemoi |
+| **Branch** | `main` |
+| **Author** | grafana-watcher |
+| **Hash** | `203d298e612d9e70c36898f9865ce9ff5fa30f69` |
+
+
+### Description
+
+6-phase runbook for FortiOS/FortiProxy admin interface auth bypass
+via forged Forwarded header. Covers recon, detection (API test +
+nuclei), exploitation (SSH key injection, config dump), post-exploit
+(VPN pivot, PKI extraction), and remediation.
+
+Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
+
+### Files Changed
+
+```
+M	samsonov/runbook-generator/main.py
+```
+
+### Diff Summary
+
+```
+ samsonov/runbook-generator/main.py | 87 ++++++++++++++++++++++++++++++++++++++
+ 1 file changed, 87 insertions(+)
+```