CVE-2019-6693

This Python script decrypts FortiGate user and HA configuration passwords by leveraging a known encryption key (CVE-2019-6693). It parses FortiOS configuration files and uses AES-CBC decryption with a hardcoded key.

This PoC decrypts FortiManager/FortiAnalyzer configuration secrets by exploiting a hardcoded AES key (CVE-2020-9289 and CVE-2019-6693). It handles IV extraction and padding adjustments specific to these devices.

This PoC decrypts FortiGate configuration secrets by exploiting a hardcoded AES encryption key (CVE-2019-6693). It takes a base64-encoded encrypted string and decrypts it using a known key and IV.

This PoC decrypts FortiGate configuration files or individual encrypted strings using a known default encryption key. It leverages AES-CBC decryption to reveal sensitive information if the default key has not been changed.