Synacktiv high experimental sigma

CVE-2024-23666 - FortiManager SSH Web Console Exploitation Script

FortiManager SSH web console exploitation script simulating a shell on a FortiGate

View Source

Detection Logic

{
  "type": "temporal",
  "rules": [
    "be1e0ec6-9cf8-49ba-aec0-fe380c74a23b",
    "f4f2111e-ff70-4b1b-a452-fce8632df20e",
    "c8bb72aa-6c3f-4c3c-8fa4-8a5ca9cb539a",
    "7a51b629-10b7-430d-a1d2-3fd0afc11937",
    "7d57d500-4320-4bdd-832c-62e2997921d0"
  ],
  "timespan": "10m"
}

False Positives

  • ⚠ Legitimate administrative actions by high-privilege users not in the filter

Field Validations

Loading…

Comments (0)

Loading comments...