Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2023-42793_POC — Automated exploit script for CVE-2023-42793 targeting TeamCity, enabling token manipulation and admin user creation for penetration testing. | Kitploit
Tools/GitHubGitHub/johnossawy/cve-2023-42793_poc
Vulnerability ScannersExploitationWeb Application ExploitationPenetration TestingRed Teaming
GitHubjohnossawy/cve-2023-42793_poc

CVE-2023-42793_POC

Automated exploit script for CVE-2023-42793 targeting TeamCity, enabling token manipulation and admin user creation for penetration testing.

View Repository
2 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2023-42793 Exploit Script

Overview

This script is designed to automate the exploitation process for the CVE-2023-42793 vulnerability. It targets a specific service (presumably affected by this vulnerability) and attempts to delete a user token, create a new user token, and then create a new user with administrative privileges.

Requirements

  • Python 3
  • Libraries: requests, random, argparse, xml.etree.ElementTree

Installation

  1. Ensure Python 3 is installed on your system.
  2. Install the required Python libraries:
    root@kitploit:~
    pip install requests

Usage

The script can be executed against either a single URL or a list of URLs.

  1. Single URL Mode:

    root@kitploit:~
    python script_name.py -u <URL of the TeamCity>

  2. List Mode:

    root@kitploit:~
    python script_name.py -l <file containing list of URLs>

Features

  • Automated Exploitation: Automates the CVE-2023-42793 exploit process.
  • Flexible Targeting: Can target a single URL or multiple URLs from a list.
  • Logging: Successful exploits are logged in vulnerable.txt.

Caution

  • This script is intended for educational and ethical testing purposes only.
  • Use it responsibly and only on systems for which you have explicit permission to test.

Contributing

Contributions to enhance the script or its documentation are welcome. Please adhere to standard coding practices and ensure that all submissions are thoroughly tested.

Download Tool