Skip to content

README.md

Latest commit

 

History

History
46 lines (33 loc) · 1.09 KB

README.md

File metadata and controls

46 lines (33 loc) · 1.09 KB

FortiWeb Auth Bypass Check

FortiWeb auth bypass scanner by Bishop Fox

  • Tests a target for authentication bypass CVE-2025-64446
  • Only exploits a path traversal, does not exploit the actual auth bypass
  • Does not perform any administrative actions on the target

For more information about this vulnerability, refer to the Bishop Fox blog.

Setup

git clone https://github.com/BishopFox/fortiweb-auth-bypass-check
cd fortiweb-auth-bypass-check
python3 -m pip install requests

Usage

python3 scan.py https://[TARGET]

Examples

# Vulnerable target
$ python3 scan.py https://example1.com
[*] Testing https://example1.com
[!] Target is VULNERABLE - update immediately!

# Unaffected target
$ python3 scan.py https://example2.com
[*] Testing https://example2.com
[+] Target is not affected

# Invalid target
$ python3 scan.py https://example3.com
[*] Testing https://example3.com
[-] Target does not appear to be FortiWeb

License

This code is distributed under an MIT license.