CVE-2023-27100

This exploit bypasses the anti-brute force protection in pfSense CE <= 2.6.0 by manipulating the X-Forwarded-For header to avoid IP-based rate limiting. It performs a credential brute-force attack using provided username and password lists.

The repository contains a functional Python script that exploits CVE-2023-27100, an anti-brute force protection bypass in pfSense CE <= 2.6.0. The exploit leverages the 'X-Forwarded-For' header to bypass authentication rate limits and performs a credential brute-force attack.

This repository contains a functional Python script that exploits CVE-2023-27100, an anti-brute force protection bypass in pfSense CE <= 2.6.0. The exploit leverages the 'X-Forwarded-For' header to bypass authentication rate limits and performs a credential brute-force attack.