CVE-2022-39952

This repository contains a functional exploit for CVE-2022-39952, which abuses an arbitrary file write vulnerability in Fortinet FortiNAC via the keyUpload.jsp endpoint. The exploit uploads a malicious cron job to achieve remote code execution.

This repository contains a functional exploit for CVE-2022-39952, a command injection vulnerability in Fortinet FortiNAC. The exploit allows arbitrary command execution via a malicious file upload, supporting both reverse shell and webshell payloads.

This repository contains a functional exploit for CVE-2022-39952, which allows an attacker to upload a malicious ZIP file containing a JSP webshell to a vulnerable Fortinet FortiNAC server. The exploit leverages an unauthenticated file upload vulnerability in the `/configWizard/keyUpload.jsp` endpoint.

This repository contains a functional exploit for CVE-2022-39952, a command injection vulnerability in Fortinet FortiNAC. The exploit allows arbitrary command execution via a malicious file upload to the `/configWizard/keyUpload.jsp` endpoint, delivering either a reverse shell or a webshell payload.

This repository implements a honeypot to detect exploitation attempts against CVE-2022-39952, a vulnerability in Fortinet FortiNAC. It captures payloads sent to the vulnerable endpoint `/configWizard/keyUpload.jsp` and stores them for analysis.

This Metasploit module exploits an arbitrary file write vulnerability in Fortinet FortiNAC's keyUpload.jsp endpoint, allowing unauthenticated remote attackers to upload a payload and a cron job to achieve root-level command execution.