adminlove520 / CVE-2024-0204

GoAnywhere MFT

CVE-2024-0204: Authentication Bypass in GoAnywhere MFT

Script to create a new admin user in GoAnywhere MFT.

Usage

Password must be at least 8 characters long to meet GoAnywhere MFT complexity requirements.

% python3 CVE-2024-0204.py -h
usage: CVE-2024-0204 GoAnywhere Authentication Bypass [-h]
                                                      endpoint username
                                                      password

positional arguments:
  endpoint    The endpoint URL (e.g., http://127.0.0.1:8080)
  username    New admin username
  password    New admin password

optional arguments:
  -h, --help  show this help message and exit