• XSS.stack #1 – первый литературный журнал от юзеров форума

2 Fortinet RCE [ Full Exploit Chain ]

В этой теме можно использовать автоматический гарант!

mkhalilovx29

ripper
КИДАЛА
Регистрация
02.02.2024
Сообщения
45
Реакции
33
Гарант сделки
4
Пожалуйста, обратите внимание, что пользователь заблокирован
Цена
10000
Контакты
P.M
Hi

I started To sell 2 RCE of fortinet sslvpn full exploit chain For All Devices


Based On this topic: https://xss.pro/threads/83850/page-2#post-852751 I speak about different between released POCs and Full Exploit Chain.

full chain exploit for cve-2022-42475 and xortigate ( cve-2023-27997_

the zip file consists of 4 python code ( for each cve 4 file for 2 different arch that provide in fortinet )

also text file ( or if u want i can convert to json file ) with gadgets needed and address (for x86 and arm32) [ if u need aarch64 some additional fee needed to pay ]

1 python file as shellcode generator (that can use with 2 cve as payload)

1 python file for version detecting based on CVE-2024-23662

tutorial file for using and sample silver agent payload that use for test

if u needed feel free to contact me


have a nice day
 
Hi

I started To sell 2 RCE of fortinet sslvpn full exploit chain For All Devices


Based On this topic: https://xss.pro/threads/83850/page-2#post-852751 I speak about different between released POCs and Full Exploit Chain.

full chain exploit for cve-2022-42475 and xortigate ( cve-2023-27997_

the zip file consists of 4 python code ( for each cve 4 file for 2 different arch that provide in fortinet )

also text file ( or if u want i can convert to json file ) with gadgets needed and address (for x86 and arm32) [ if u need aarch64 some additional fee needed to pay ]

1 python file as shellcode generator (that can use with 2 cve as payload)

1 python file for version detecting based on CVE-2024-23662

tutorial file for using and sample silver agent payload that use for test

if u needed feel free to contact me


have a nice day
aren't those vulnerabilities too old?
 
Пожалуйста, обратите внимание, что пользователь заблокирован
aren't those vulnerabilities too old?
Hi there

yes you are right about date of published

but make scan internet for vuln version and you maybe get suprised

maybe date of publish is not important for someone , instead he look for how much target that can be granted

have a nice day
 
Hi there

yes you are right about date of published

but make scan internet for vuln version and you maybe get suprised

maybe date of publish is not important for someone , instead he look for how much target that can be granted

have a nice day
in terms of not updated systems, yes. but newer vuln is better
 
Пожалуйста, обратите внимание, что пользователь заблокирован
in terms of not updated systems, yes. but newer vuln is better
yes you are right again

so do it your own, start developing exploit for 2024 cve and sell with higher price :D

good luck mate
 
Пожалуйста, обратите внимание, что пользователь заблокирован
i wish i know enough about coding exploits but no. i am looking for a pro who knows well about it.
so you should not post these on other sellers topics

you can create topic on the section specify for this , and start to look for developer

here is for sell the exploit i advertised
 


Напишите ответ...
Верх