Skip to main content
chservice
New Member
August 28, 2024
Question

DATA1 and DATA2

  • August 28, 2024
  • 1 reply
  • 935 views

Hi! i've already sent an email to Fortinet Support and they told me to post here.
I've done a fast research on how forticlient vpn store and crypt data inside the register of Windows and i've wrote  a PoC that succesfully decrypt them, i've tested on 3 PCs

I want to send to you the code to review it if i can

Ty

1 reply

AEK
SuperUser
SuperUser
August 28, 2024

Hi

I think the right thing to do is not to publish it, but to report it to Fortinet PSIRT team.

Read more here:

https://www.fortiguard.com/psirt_policy

Hope it helps.

AEK
Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!