CVE-2024-1708

This repository contains a functional Python exploit for CVE-2024-1708 (authentication bypass) and CVE-2024-1709 (RCE) in ConnectWise ScreenConnect. The tool checks for vulnerability and provides exploitation guidance, including admin endpoint discovery and setup mode detection.

This repository contains a functional exploit for CVE-2024-1708, which targets a vulnerability in a web application (likely a .NET-based system). The exploit involves uploading a malicious extension (ASHX handler) to achieve remote code execution (RCE) by leveraging an authenticated endpoint.

This Metasploit module exploits CVE-2024-1709 (auth bypass) and CVE-2024-1708 (path traversal) in ConnectWise ScreenConnect to create an admin account and achieve RCE via malicious extension upload. It supports Windows and Linux targets.