Skip to main content
bigkeoni64
Explorer II
December 14, 2022
Solved

Checking the FortiGate OS Linux file system

  • December 14, 2022
  • 6 replies
  • 7399 views

Hello

 

I am trying to determine if a customer of mine has been infected by the latest vulnerability. How do you access the Linux file system to check if the files are present?

bigkeoni64_0-1670988850580.png

 

Thank you

Best answer by FredPaul

 

Hi,

 

Run these commands to look for the files:

fnsysctl ls -la /data/lib/libips.bak fnsysctl ls -la /data/lib/libgif.so fnsysctl ls -la /data/lib/libiptcp.so fnsysctl ls -la /data/lib/libipudp.so fnsysctl ls -la /data/lib/libjepg.so fnsysctl ls -la /var/.sslvpnconfigbk fnsysctl ls -la /data/etc/wxd.conf fnsysctl ls -la /flash

6 replies

FredPaul
FredPaulAnswer
New Member
December 14, 2022

 

Hi,

 

Run these commands to look for the files:

fnsysctl ls -la /data/lib/libips.bak fnsysctl ls -la /data/lib/libgif.so fnsysctl ls -la /data/lib/libiptcp.so fnsysctl ls -la /data/lib/libipudp.so fnsysctl ls -la /data/lib/libjepg.so fnsysctl ls -la /var/.sslvpnconfigbk fnsysctl ls -la /data/etc/wxd.conf fnsysctl ls -la /flash
FCSS-SN
bigkeoni64
Explorer II
December 14, 2022

I see only these 2 so we should be good to g - thank you.

Is there a place I can find more hidden commands like the "fnsysctl"?

bigkeoni64
Explorer II
December 14, 2022

bigkeoni64_0-1670992852745.png

 

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.