# Fortiscan | A High Performance FortiGate SSL-VPN Vulnerability Scanning And Exploitation Tool

**URL:** <https://onehack.st/t/fortiscan-a-high-performance-fortigate-ssl-vpn-vulnerability-scanning-and-exploitation-tool/192853>\
**Category:** Tools & Scripts\
**Tags:** tools, hacking\
**Created:** [July 6, 2021, 12:19pm UTC](https://onehack.st/t/fortiscan-a-high-performance-fortigate-ssl-vpn-vulnerability-scanning-and-exploitation-tool/192853 "2021-07-06T12:19:22Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![TheStrength](https://onehack.st/user_avatar/onehack.st/thestrength/32/46753_2.png) [@TheStrength](https://onehack.st/u/TheStrength)\
**Post date:** [July 6, 2021, 12:19pm UTC](https://onehack.st/t/fortiscan-a-high-performance-fortigate-ssl-vpn-vulnerability-scanning-and-exploitation-tool/192853/1 "2021-07-06T12:19:23Z")

</div>

# Fortiscan

(CVE-2018-13379) (FG-IR-18-384) Exploitation Tool, You can use this tool to check the vulnerability in your FortiGate SSL-VPN.

### This vulnerability affects the following versions:

• FortiOS 6.0 - 6.0.0 to 6.0.4 • FortiOS 5.6 - 5.6.3 to 5.6.7 • FortiOS 5.4 - 5.4.6 to 5.4.12

> **[FortiOS and SSL Vulnerabilities](https://www.fortinet.com/blog/psirt-blogs/fortios-ssl-vulnerability)**
>
> At the recent Black Hat 2019 conference, security researchers discussed their discovery of security vulnerabilities that impacted several security vendors, including Fortinet. We urge customers to …

[![Test Image 3](https://github.com/anasbousselham/fortiscan/raw/master/screenshoot/3.jpg)](https://github.com/anasbousselham/fortiscan/blob/master/screenshoot/3.jpg)

[![Test Image 1](https://github.com/anasbousselham/fortiscan/raw/master/screenshoot/1.jpg)](https://github.com/anasbousselham/fortiscan/blob/master/screenshoot/1.jpg)

[![Test Image 2](https://github.com/anasbousselham/fortiscan/raw/master/screenshoot/2.jpg)](https://github.com/anasbousselham/fortiscan/blob/master/screenshoot/2.jpg)

## Important Update 0.7

- Grab cleartext credentials with serial number of Fortinet device.
- Extremely Fast

## Usage v 0.6 File List

`./fortiscan ip.txt`

## Usage v 0.5 (One Liner to Initiate the Scan : Host|IP:Port(443 or 10443 or 8443)

`./fortiscan 192.168.1.1:10443`

## Requirements

Tested with Parrot & Debian Operating Systems and Windows 10

### Compiled version Linux & windows

> **[Releases · anasbousselham/fortiscan](https://github.com/anasbousselham/fortiscan/releases)**
>
> A high performance FortiGate SSL-VPN vulnerability scanning and exploitation tool. - anasbousselham/fortiscan

## GitHub:

[https://github.com/anasbousselham/fortiscan](https://github.com/anasbousselham/fortiscan)