42 lines
998 B
Markdown
42 lines
998 B
Markdown
---
|
|
title: "[bojemoi] feat(runbook): add FortiOS auth bypass CVE-2022-40684 scenario"
|
|
date: 2026-07-09T20:29:52+02:00
|
|
draft: false
|
|
tags: ["commit", "bojemoi", "main"]
|
|
categories: ["Git Activity"]
|
|
summary: "Commit 203d298 par grafana-watcher dans bojemoi"
|
|
author: "grafana-watcher"
|
|
---
|
|
|
|
## Commit `203d298`
|
|
|
|
| | |
|
|
|---|---|
|
|
| **Repository** | bojemoi |
|
|
| **Branch** | `main` |
|
|
| **Author** | grafana-watcher |
|
|
| **Hash** | `203d298e612d9e70c36898f9865ce9ff5fa30f69` |
|
|
|
|
|
|
### Description
|
|
|
|
6-phase runbook for FortiOS/FortiProxy admin interface auth bypass
|
|
via forged Forwarded header. Covers recon, detection (API test +
|
|
nuclei), exploitation (SSH key injection, config dump), post-exploit
|
|
(VPN pivot, PKI extraction), and remediation.
|
|
|
|
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
|
|
|
|
### Files Changed
|
|
|
|
```
|
|
M samsonov/runbook-generator/main.py
|
|
```
|
|
|
|
### Diff Summary
|
|
|
|
```
|
|
samsonov/runbook-generator/main.py | 87 ++++++++++++++++++++++++++++++++++++++
|
|
1 file changed, 87 insertions(+)
|
|
```
|