precursor 0.2.3

Pre-protocol payload tagging, similarity clustering, and packet/firmware triage CLI.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20

(?s)(?<possible_fortinet>.*\/remote\/fgt_lang\?lang=\/\.\..*)
(?s)(?<possible_fortinet>.*\/remote\/logincheck.*)
(?s)(?<possible_fortinet>.*\/fgt_lang\?lang=.*)
(?s)(?<possible_fortinet>.*\/configWizard\/keyUpload\.jsp.*)
(?s)(?<possible_fortinet>.*\/remote\/hostcheck_validate.*)
(?s)(?<possible_fortinet>.*\/remote\/logincheck.*)
(?s)(?<possible_fortinet>.*\/remote\/info.*)
(?s)(?<possible_fortinet>.*\/remote\/error.*)
(?s)(?<possible_fortinet>.*\/ems\/cgi-bin\/ezrf.*)
(?s)(?<possible_fortinet>.*\x1d\x00\x00.*\x00\x00\x00\x6f\x42\x1e\x40.*)
(?s)(?<possible_fortinet_weak1>^[A-Za-z0-9+/]{0,4}?[^\x20-\x7e].*Host.*Content-length.*)
(?s)(?<possible_fortinet_weak2>(?:\%3C){1000}.*\/message.*)
(?s)(?<possible_fortinet_weak3>A{1000}.*javascript.*)
(?s)(?<possible_fortinet_weak3>.*\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\x05.*)
(?s)(?<possible_fortinet_weak4>.*\xac\xed.*Ljava.*)
(?s)(?<possible_fortinet_weak_5>.*\/api\/v2.*)
(?s)(?<possible_fortinet_weak_6>.*\/sslvpn\/portal.*)
(?s)(?<possible_fortinet_weak_7>.*sslvpn_websession.*)
(?s)(?<possible_fortinet_very_weak_1>.*\/ng\/.*)