Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2021-24019 PoC — Fortinet FortiClientEms 代码问题漏洞

Source
Associated Vulnerability
Title:Fortinet FortiClientEms 代码问题漏洞 (CVE-2021-24019)
Description:Fortinet FortiClientEms是美国Fortinet公司的一个集中式中央管理系統。 FortiClientEMS 6.4.2及以下版本、6.2.8及以下版本存在代码问题漏洞,攻击者可利用该漏洞通过重用未过期的管理员用户会话ID以获得管理员权限。
Description
Exploit
Readme
# CVE-2021-24019
Exploit
FortiClient EMS 6.2.6 - Authentication Bypass Exploit

Overview

This script automates session token validation to test if authentication can be bypassed in FortiClient EMS 6.2.6. The user provides the target, and the script checks a list of session tokens for valid access.


---

Usage Instructions

1. Update tokens.txt with session tokens. Example:

csrftoken=example123...
sessionid=abcdef123...


2. Run the script:

python exploit.py


3. Enter the target URL when prompted.


4. If a valid token is found, access is granted.



---

Legal Disclaimer

This script is for educational purposes only. Unauthorized testing on systems without explicit permission is illegal. 
File Snapshot

[4.0K] /data/pocs/0a7b0f64ccf674e29330df1e913f6d008082d610 ├── [ 980] exploit.py └── [ 703] README.md 0 directories, 2 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.