CVE-2021-24019 PoC — Fortinet FortiClientEms 代码问题漏洞

来源

关联漏洞

Description

Exploit

介绍

# CVE-2021-24019
Exploit
FortiClient EMS 6.2.6 - Authentication Bypass Exploit

Overview

This script automates session token validation to test if authentication can be bypassed in FortiClient EMS 6.2.6. The user provides the target, and the script checks a list of session tokens for valid access.


---

Usage Instructions

1. Update tokens.txt with session tokens. Example:

csrftoken=example123...
sessionid=abcdef123...


2. Run the script:

python exploit.py


3. Enter the target URL when prompted.


4. If a valid token is found, access is granted.



---

Legal Disclaimer

This script is for educational purposes only. Unauthorized testing on systems without explicit permission is illegal. 

文件快照

 [4.0K]  /data/pocs/0a7b0f64ccf674e29330df1e913f6d008082d610
├── [ 980]  exploit.py
└── [ 703]  README.md

0 directories, 2 files

备注