Skip to main content
chservice
New Member
Aug 28, 2024 10:10 AM UTC
Question

DATA1 and DATA2

Hi! i've already sent an email to Fortinet Support and they told me to post here.
I've done a fast research on how forticlient vpn store and crypt data inside the register of Windows and i've wrote  a PoC that succesfully decrypt them, i've tested on 3 PCs

I want to send to you the code to review it if i can

Ty

1 reply

AEK
SuperUser
SuperUser
Aug 28, 2024 10:26 AM UTC

Hi

I think the right thing to do is not to publish it, but to report it to Fortinet PSIRT team.

Read more here:

https://www.fortiguard.com/psirt_policy

Hope it helps.

AEK
Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT