---
title: "[bojemoi] feat(runbook): add FortiOS auth bypass CVE-2022-40684 scenario"
date: 2026-07-09T20:29:52+02:00
draft: false
tags: ["commit", "bojemoi", "main"]
categories: ["Git Activity"]
summary: "Commit 203d298 par grafana-watcher dans bojemoi"
author: "grafana-watcher"
---

## Commit `203d298`

| | |
|---|---|
| **Repository** | bojemoi |
| **Branch** | `main` |
| **Author** | grafana-watcher |
| **Hash** | `203d298e612d9e70c36898f9865ce9ff5fa30f69` |


### Description

6-phase runbook for FortiOS/FortiProxy admin interface auth bypass
via forged Forwarded header. Covers recon, detection (API test +
nuclei), exploitation (SSH key injection, config dump), post-exploit
(VPN pivot, PKI extraction), and remediation.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

### Files Changed

```
M	samsonov/runbook-generator/main.py
```

### Diff Summary

```
 samsonov/runbook-generator/main.py | 87 ++++++++++++++++++++++++++++++++++++++
 1 file changed, 87 insertions(+)
```