milo2012/CVE-2018-13382

Stars
146
Rank 252,769 (Top 5 %)
Language
Python
Created over 5 years ago
Updated over 5 years ago

milo2012/CVE-2018-13382

milo2012

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

CVE-2018-13382

CVE-2018-13382

CVE-2018-13382

https://devco.re/blog/2019/08/09/attacking-ssl-vpn-part-2-breaking-the-Fortigate-ssl-vpn/

An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5.4.1 to 5.4.10 under SSL VPN web portal allows an unauthenticated attacker to modify the password of an SSL VPN web portal user via specially crafted HTTP requests.

$ python CVE-2018-13382.py  -h
Usage: CVE-2018-13382.py [options]

Options:
  -h, --help   show this help message and exit
  -i IP        e.g. 127.0.0.1:10443
  -u USERNAME  
  -p PASSWORD

osintstalker

pathbrute

CVE-2018-13379

metasploitHelper

metasploitHelper

pentest_scripts

portia

Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account has been compromised. Portia performs privilege escalation as well as lateral movement automatically in the network

CVE-2018-0296

Test CVE-2018-0296 and extract usernames

ipv4Bypass

Using IPv6 to Bypass Security

iPhone-Espionage

nmap2nessus

owaDump

Search Email Accounts (OWA) for Passwords, PAN numbers as well as other Keywords

Social-Engineering-Toys

Social Engineering Toys

CVE-2021-21972

burpSQL

Automating SQL injection using Burp Proxy Logs and SQLMap

phishing-frenzy-template-cloner

pentest_automation

proxy_tester

Python script to test proxies

burpXSS

Automating LFI/RFI using Burp Proxy Logs and fimap

goSpider

Golang code to crawl website, extract links from html, paths from JavaScript code, follow and repeat.

firebirdDump

Uses the default firebird database credentials to perform a database dump

CVE-2020-14882

CVE-2013-6117

fingerprint_browser

winboxHunter

smbDumper

phishing-scripts

Some miscellaneous phishing scripts

proxies-rotator

Dockerfile for Proxies Testing/Rotation

botstrike

nuclei-templates-others

phishingfarm

excelcrack

Automatically exported from code.google.com/p/excelcrack

pentest-scripts

Automatically exported from code.google.com/p/pentest-scripts

carbonatorMulti

Fork from Integris Security Carbonator - Carbonator to scan multiple URLs using Burpsuite at one go

getoab

Automatically exported from code.google.com/p/getoab

recon

OpenscapAlternative

Openscap Alternative for RHEL (without Installation)

shoretel-brute

Automatically exported from code.google.com/p/shoretel-brute

limekernelmodules

Kernel Modules for LIME forensics

xlsinjector

Automatically exported from code.google.com/p/xlsinjector

prefetch-tool

Automatically exported from code.google.com/p/prefetch-tool