CVE-2024-0204 PoC — Authentication Bypass in GoAnywhere MFT

Source

Associated Vulnerability

Description

GoAnywhere MFT

Readme

# CVE-2024-0204: Authentication Bypass in GoAnywhere MFT
Script to create a new admin user in GoAnywhere MFT.


## Usage
Password must be at least 8 characters long to meet GoAnywhere MFT complexity requirements.

```
% python3 CVE-2024-0204.py -h
usage: CVE-2024-0204 GoAnywhere Authentication Bypass [-h]
                                                      endpoint username
                                                      password

positional arguments:
  endpoint    The endpoint URL (e.g., http://127.0.0.1:8080)
  username    New admin username
  password    New admin password

optional arguments:
  -h, --help  show this help message and exit
```

File Snapshot

 [4.0K]  /data/pocs/344455772ae5820c110f089c60101863af076894
├── [2.0K]  CVE-2024-0204.py
└── [ 662]  README.md

0 directories, 2 files

Remarks