CVE-2022-42475 PoC — Fortinet FortiOS 缓冲区错误漏洞

Description

test for the ioc described for FG-IR-22-398

介绍

# ioc-cve-2022-42475
a simple util that uses ssh to check for the ioc's noted in [fortiguard](https://www.fortiguard.com/psirt/FG-IR-22-398).  
it uses ssh and runs the commands described on [fortinet forum](https://community.fortinet.com/t5/FortiGate/Technical-Tip-Critical-vulnerability-Protect-against-heap-based/ta-p/239420).  

## build
git clone the project.  
this is developed on 1.66.1.

build using cargo:   

    cargo build --release

## run
after building it runs like any other commandline utility.  

    ./ioc-cve-2022-42475


it wil return true on any of the ioc matches.  

文件快照

备注