Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2024-27198 — PoC about CVE-2024-27198 | Kitploit
Tools/GitHubGitHub/jrbh4ck/cve-2024-27198
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingAuthenticationLearning & Education
GitHubjrbh4ck/cve-2024-27198

CVE-2024-27198

PoC about CVE-2024-27198

View Repository
32 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2024-27198

In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions in TeamCity server, an attacker can take full control over all TeamCity projects, builds, agents and artifacts, finally the attacker will perfomn a RCE.

Download

root@kitploit:~
git clone https://github.com/jrbH4CK/CVE-2024-27198.git
cd CVE-2024-27198

PoC

To create an account as admin privileges inside the server

root@kitploit:~
python3 cve-2024-27198.py http://example.com username password

Demo:

Account creation

Texto alternativo

User roles

Texto alternativo

Additional notes

Download Tool
  • The explanation of this vulnerability is on https://www.rapid7.com/blog/post/2024/03/04/etr-cve-2024-27198-and-cve-2024-27199-jetbrains-teamcity-multiple-authentication-bypass-vulnerabilities-fixed/
  • Another reference https://nvd.nist.gov/vuln/detail/CVE-2024-27198
  • The exploit was tested on JetBrains TeamCity version 2023.05.3 in a controlled environment
  • FOR EDUCATIONAL PORPOUSES ONLY