Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2024-27198 — A PoC for CVE-2024-27198 written in Go | Kitploit
Tools/GitHubGitHub/rampantspark/cve-2024-27198
Authentication & AuthorizationVulnerability AnalysisExploitationWeb Application ExploitationPenetration Testing
GitHubrampantspark/cve-2024-27198

CVE-2024-27198

A PoC for CVE-2024-27198 written in Go

View Repository
22 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2024-27198

Auth bypass for TeamCity Server version 2023.11.3 and below.

image

NIST: https://nvd.nist.gov/vuln/detail/CVE-2024-27198

Rapid7 blog post: https://www.rapid7.com/blog/post/2024/03/04/etr-cve-2024-27198-and-cve-2024-27199-jetbrains-teamcity-multiple-authentication-bypass-vulnerabilities-fixed/

Example Usage

root@kitploit:~
go run CVE-2024-27198.go -h
  -s string
    	TeamCity Server
  -p string
    	New admin password
  -u string
    	New admin username
  -proxy
        Proxy URL (optional)
root@kitploit:~
go run CVE-2024-27198.go -s http://IP_OR_FQDN:PORT -u new_admin_username -p new_admin_password -proxy http://IP_OR_FQDN:PORT

*Please Refer to https://github.com/yoryio/CVE-2024-27198 for instructions on setting up a lab environment.

Download Tool