module
CrushFTP AWS4-HMAC Authentication Bypass
| Disclosed |
|---|
| N/A |
Disclosed
N/A
Description
This module leverages an authentication bypass in CrushFTP 11 with knowledge of a valid username can provide a crafted S3 authentication header to the CrushFTP web API
to authenticate as that user without valid credentials. When successfully executed, the exploit will
output working session cookies for the target user account.
to authenticate as that user without valid credentials. When successfully executed, the exploit will
output working session cookies for the target user account.
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.