Sploitus

Exploit for Missing Authentication for Critical Function in Jetbrains Teamcity

githubexploit · 2024-07-05

Exploit Code

README2 lines
## https://sploitus.com/exploit?id=88326A44-1093-5883-B017-2769ECF67093
PoC exploit for CVE-2023-42793, a TeamCity RCE vulnerability on Linux. The exploit is written in Python and utilizes the `argparse` library for command-line argument parsing. The exploit requires a TeamCity token, URL, port, netcat listener IP, and netcat listener port as input. It sends a request to enable debug mode and then a reverse shell payload to the TeamCity server, allowing for remote code execution. The reverse shell is encoded in the URL and sent as a POST request to the `/app/rest/debug/processes` endpoint. The exploit is typically invoked by running the `main.py` script with the required arguments.