CVE-2024-5806

This is a functional exploit for CVE-2024-5806, an authentication bypass vulnerability in Progress MOVEit Transfer. It leverages log poisoning to bypass SFTP authentication and impersonate arbitrary users.

This exploit leverages an authentication bypass vulnerability in Progress MoveIT Transfer by poisoning log files with attacker-controlled SSH public keys, then using Paramiko to authenticate via SFTP. The PoC automates key generation and log poisoning to achieve unauthorized access.

This Metasploit module exploits CVE-2024-5806, an authentication bypass vulnerability in Progress MOVEit Transfer SFTP service, allowing arbitrary file read by manipulating the SSH publickey authentication process.