sfewer-r7/CVE-2026-0257 ? reverse-engineered prompt

Build me a small Python tool that checks a PAN OS GlobalProtect portal or gateway for this authentication bypass issue. It should connect to a target host, read the TLS certificate chain, try each public key it finds, and attempt to forge an authentication override cookie for a chosen user. Then it should test whether the cookie works against the portal and gateway, and clearly show which one accepted it.

I want simple command line options for the target, port, username, domain, host ID, client OS, client IP, and whether to test portal, gateway, or both. Make the default output short and easy to read, and add a verbose mode that prints the full response and any VPN connection details it can retrieve when a forged cookie succeeds.

Please keep it as a single script if possible, and make it easy to run from the terminal. If you need current details from public docs, look them up online first.