CVE-2022-40684 PoC — Fortinet FortiOS 授权问题漏洞

介绍

# Fortigate-Belsen-Leak-Dump-CVE-2022-40684


How This Script Works
Folder Traversal:

The script goes through all subfolders under root_folder and looks for vpn-passwords.txt.
Line Processing:

Skips any lines with the banner -=-= Belsen Group -=-=.
For lines with the username:password format:
Splits the line at the colon : using line.split(":", 1).
Extracts the part after the colon (password) and writes it to the output file.
Output:

Passwords are saved in the extracted_passwords.txt file, one password per line.

文件快照

备注