CVE-2019-6693 PoC — Fortinet FortiOS 信任管理问题漏洞

介绍

# CVE-2019-6693

Have you changed your default FortiGate encryption keys? Run this script and find out! You can provide the entire configuration file dump or individual encrypted values. If the decrypted values aren't complete nonsense or produce a word, then it is likely the encryption is left as default.

## Installation

```bash
git clone https://github.com/Real4XoR/cve-2019-6693.git
cd cve-2019-6693
pip3 install -r requirements.txt
```

## Usage

Provide the entire `.conf` configuration file:

```bash
python3 cve-2019-6693.py --config <File>.conf
```

You can also provide just the encrypted string:

```bash
python3 cve-2019-6693.py --string <ENC String>
```
## Kudos

Rework of the below script to make it do a few more things.

https://github.com/saladandonionrings/cve-2019-6693

文件快照

备注