
TeamCity CVE-2023-42793 RCE (Remote Code Execution)
TeamCity CVE-2023-42793 RCE (Remote Code Execution)
rce.pyInspired by - https://www.prio-n.com/blog/cve-2023-42793-attacking-defending-JetBrains-TeamCity
python3 rce.py --url teamcity.runner.htb --command whoami
exploit.pyThis script is copy of https://www.exploit-db.com/exploits/51884 made by ByteHunter.
The script returns login credentials, it's not RCE!
python3 exploit.py -u teamcity.runner.htb
USE ONLY FOR EDUCATIONAL PURPOSES!
NOTE: This exploit is created as a PoC; use it only for educational purposes or CTFs - https://flojboj.org/article/Runner