@@ -9,6 +9,9 @@ following version are affected:
9
9
The module can establish an authenticated SFTP session for a MOVEit Transfer user. The module allows for both listing
10
10
the contents of a directory, and the reading of an arbitrary file.
11
11
12
+ Read our AttackerKB [ Rapid7 Analysis] ( https://attackerkb.com/topics/44EZLG2xgL/cve-2024-5806/rapid7-analysis )
13
+ for a full technical description of both the vulnerability and exploitation.
14
+
12
15
## Testing
13
16
1 . Installation requires a valid trial license that can be obtained by going here:
14
17
https://www.ipswitch.com/forms/free-trials/moveit-transfer
@@ -18,7 +21,7 @@ the contents of a directory, and the reading of an arbitrary file.
18
21
5 . Log in as the sysadmin and create a new Organization (e.g. ` TestOrg ` ).
19
22
6 . In the ` Home ` section, click the "Act as administrator in the TestOrg organization" button.
20
23
7 . In the ` Users ` section, create a new normal user (e.g. ` testuser1 ` ) in the new Organization.
21
- 8 . In the ` Folders ` section, navigate the ` testuser1 ` Home folder and create some files and folders.
24
+ 8 . In the ` Folders ` section, navigate to the ` testuser1 ` Home folder and create some files and folders.
22
25
9 . The SFTP service will be running by default. No further configuration is required.
23
26
24
27
## Verification Steps
@@ -27,7 +30,7 @@ the contents of a directory, and the reading of an arbitrary file.
27
30
2 . ` use auxiliary/gather/progress_moveit_sftp_fileread_cve_2024_5806 `
28
31
3 . ` set RHOST <TARGET_IP_ADDRESS> `
29
32
4 . ` set STORE_LOOT false `
30
- 5 . ` set TARGETUSER <TARGET_USERNAME> `
33
+ 5 . ` set TARGETUSER <TARGET_USERNAME> ` (Must be a valid username on the target server, for example ` testuser1 ` )
31
34
6 . ` set TARGETFILE / `
32
35
7 . ` check `
33
36
8 . ` run `
@@ -44,7 +47,7 @@ A valid username to authenticate as. (default: nil).
44
47
### TARGETFILE
45
48
The full path of a target file or directory to read. If a directory path is specified, the output will be the
46
49
directories contents. If a file path is specified, the output will be the files contents. In order to learn
47
- what files you can read, you cna first read the root directories (/) contents.(default: /).
50
+ what files you can read, you can first read the root directories (/) contents. (default: /).
48
51
49
52
## Scenarios
50
53
0 commit comments