CVE-2018-13382

This exploit leverages an unauthenticated password modification vulnerability in Fortinet FortiOS SSL VPN. It sends a crafted POST request with a hardcoded 'magic' value to change the password of a specified user.

This PoC exploits CVE-2018-13382, an improper authorization vulnerability in Fortinet FortiOS SSL VPN web portal, allowing unauthenticated password changes via crafted HTTP requests. It checks for target validity, changes the password using a magic keyword, and verifies the new credentials.

This PowerShell script exploits CVE-2018-13382, a backdoor in Fortinet SSL VPN that allows password resets for valid users via a hidden 'magic' parameter. It sends a crafted POST request to change the password of a specified user without authentication.

This PoC exploits CVE-2018-13382, an authentication bypass vulnerability in Fortinet FortiOS SSL VPN. It allows an attacker to change the password of any user without knowing the original password by leveraging a 'magic' keyword in the request.