Update fortios-exposed-admin-panel.yaml

exposed-panels/fortios-exposed-admin-panel.yaml

@@ -5,7 +5,7 @@ info:
   author: canberbamber
   severity: critical
   description: |
-    /api/v2/cmdb/system/admin/admin is a necessary exposed panel for cve-2022-40684 in fortigates, fortiproxy
+    /api/v2/cmdb/system/admin/admin is a necessary exposed panel for cve-2022-40684
   reference:
     - https://www.horizon3.ai/fortinet-iocs-cve-2022-40684/
   metadata:
@@ -17,9 +17,14 @@ requests:
   - raw:
       - |
         GET /api/v2/cmdb/system/admin/admin HTTP/1.1
-        Host: {{Hostname}}
+        Host: {{Hostname}}:{{port}}
         Content-Type: application/x-www-form-urlencoded
-
+    attack: clusterbomb
+    payloads:
+      port:
+        - 443
+        - 8443
+        - 10443
 
     matchers-condition: and
     matchers: