blog/content/posts/commits/2026-07-09-commit-203d298.md

title, date, draft, tags, categories, summary, author

title	date	draft	tags	categories	summary	author
[bojemoi] feat(runbook): add FortiOS auth bypass CVE-2022-40684 scenario	2026-07-09T20:29:52+02:00	false	commit bojemoi main	Git Activity	Commit 203d298 par grafana-watcher dans bojemoi	grafana-watcher

Commit 203d298

Repository	bojemoi
Branch	main
Author	grafana-watcher
Hash	203d298e612d9e70c36898f9865ce9ff5fa30f69

Description

6-phase runbook for FortiOS/FortiProxy admin interface auth bypass via forged Forwarded header. Covers recon, detection (API test + nuclei), exploitation (SSH key injection, config dump), post-exploit (VPN pivot, PKI extraction), and remediation.

Co-Authored-By: Claude Sonnet 4.6 noreply@anthropic.com

Files Changed

M	samsonov/runbook-generator/main.py

Diff Summary

 samsonov/runbook-generator/main.py | 87 ++++++++++++++++++++++++++++++++++++++
 1 file changed, 87 insertions(+)