CVE-2023-45612-PoC

CVE-2023-45612 https://nvd.nist.gov/vuln/detail/CVE-2023-45612 Description of CVE In JetBrains Ktor before 2.3.5 default configuration of ContentNegotiation with XML format was vulnerable to XXE. The vulnerability was patched by @marychatte on Sep 29, 2023 https://github.com/ktorio/ktor/pull/3770...

CVE-2026-63077

Unauthenticated Remote Code Execution in JetBrains TeamCity CVE-2026-63077 Overview This is a proof-of-concept exploit script for CVE-2026-63077. Organizations can use this script to validate their detection and remediation posture. For a full technical analysis of CVE-2026-63077, please read our...

CVE-2023-42793

CVE-2023-42793 TeamCity CVE-2023-42793 RCE Remote Code Execution rce.py Inspired by - https://www.prio-n.com/blog/cve-2023-42793-attacking-defending-JetBrains-TeamCity python3 rce.py --url teamcity.runner.htb --command whoami exploit.py This script is copy of...

CVE-2023-42793

CVE-2023-42793 JetBrains TeamCity before 2023.05.4 is vulnerable to authentication bypass leading to RCE Usage To get a reverse shell python3 exploit.py References https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem/...

CVE-2023-42793

CVE-2023-42793 description A security vulnerability in JetBrains TeamCity allows an attacker to create a new user given by the attacker with administrative privileges. Usage example ./cve-2023-42793 http://teamcity.examplewebsite.com username password...

CVE-2024-27198-RCE

Cyberspace Mapping Dork Fofa app="JETBRAINS-TeamCity" ZoomEye app:"JetBrains TeamCity" Hunter.how product.name="TeamCity" Shodan http.component:"teamcity" How to use I'm using Python3.9. pip install requests urllib3 python CVE-2024-27198-RCE.py -h | | / | | \ / | | | |/ / | ' | | | | | | | | | |...

CVE-2022-25260

CVE-2022-25260 JetBrains Hub pre-auth semi-blind server-side request forgery SSRF Requirements JetBrains Hub 2021.1.14276 JetBrains Hub before 2021.1.14276 was vulneable to improper access control CVE-2022-34894, which allows an attacker create untrusted services without authentication even if...

CVE-2022-24342

CVE-2022-24342 JetBrains TeamCity - account takeover via CSRF in GitHub authentication PoC CVE-2022-24342 Requirements Usage How does it work? GitHub OAuth2: query parameters processing order CVE-2022-24342: HTTP requests flow Requirements JetBrains TeamCity If you run the exploit on the local...

CVE-2024-27198

CVE-2024-27198 In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions in TeamCity server, an attacker can take full control over all TeamCity projects, builds, agents and artifacts, finally the attacker will perfomn a RCE. Download git clone...

RCity-CVE-2024-27198

RCity - CVE-2024-27198 RCE & Admin Account Creation & CVE-2024-27199 Auth Bypass Exploiting CVE-2024-27198 & CVE-2024-27199 RCity is a Python script that interacts with a vulnerable TeamCity server. The CVE facilitates for unauthorised admin account creation, bypassing 403's on the domain. Whilst...

CVE-2022-25262

CVE-2022-25262 PoC + vulnerability details for CVE-2022-25262 | JetBrains Hub single-click SAML response takeover CVE-2022-25262 Requirements Usage How does it work? Authorization code pool for "OAuth2 - SAML" exchange YouTrack Konnector OAuth2 authorization code takeover by design Mitigation...

CVE-2023-42793

TeamCity CVE-2023-42793 Exploit This Python script exploits a security vulnerability CVE-2023-42793 in JetBrains TeamCity, allowing an attacker to create a new user with administrative privileges. Usage The script takes either a single TeamCity instance URL or a list of URLs as input. The provide...

Explora-o-RCE-n-o-autenticado-JetBrains-TeamCity-CVE-2024-27198-

Unauthenticated RCE Exploitation JetBrains TeamCity CVE-2024-27198- In February 2024, two new vulnerabilities were identified affecting the JetBrains TeamCity server CVE-2024-27198 and CVE-2024-27199...

CVE-2024-27198-RCE

Cyberspace Mapping Dork Fofa app="JETBRAINS-TeamCity" ZoomEye app:"JetBrains TeamCity" Hunter.how product.name="TeamCity" Shodan http.component:"teamcity" How to use I'm using Python3.9. pip install requests urllib3 faker python CVE-2024-27198-RCE.py -t http://192.168.198.173:8111 --behinder4...

CVE-2024-27198-SOC-Lab

CVE-2024-27198 — SOC Detection & Incident Response Lab Authentication Bypass in JetBrains TeamCity | CVSS Score: 9.8 Critical This project builds a complete SOC Lab environment to simulate, detect, and respond to CVE-2024-27198 — an authentication bypass vulnerability in JetBrains TeamCity...

JetBrains TeamCity < 2026.1.3, 2025.11.7 - Remote Code Execution

JetBrains TeamCity 2026.1.3, 2025.11.7 contains a remote code execution caused by unsafe XStream deserialization in the unauthenticated agent polling protocol. The XStream instance serving /app/agents/v1 is created without NoTypePermission.NONE, so XStream's default type permissions Throwable, Ma...

JetBrains TeamCity > 2023.11.3 - Authentication Bypass

In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible id: CVE-2024-23917 info: name: JetBrains TeamCity 2023.11.3 - Authentication Bypass author: iamnoooob,rootxharsh,pdresearch severity: critical description: | In JetBrains TeamCity before 2023.11.3...

CVE-2024-27198-RCE

Cyberspace Mapping Dork Fofa app="JETBRAINS-TeamCity" ZoomEye app:"JetBrains TeamCity" Hunter.how product.name="TeamCity" Shodan http.component:"teamcity" How to use I'm using Python3.9. pip install requests urllib3 faker ! Problem There are currently some problems: 1. If yakit proxy is not used,...

pentest_teamcity

Pentest TeamCity usando Metasploit TL;DR: Obtener contraseñas deJetBrains IDE como IntelliJ o PyCharm y usar esas credenciales dentro de TeamCity Continuous Integration Server para obtener una sesión de meterpreter en el servidor y agentes de compilación usando metasploit por Kacper Szurek...

CVE-2024-27198-POC

CVE-2024-27198 – JetBrains TeamCity Authentication Bypass & RCE PoC Author: EynaExp Scope: Research / Defensive Validation / Authorized Testing Only Overview This repository contains a proof-of-concept mass scanner targeting JetBrains TeamCity instances affected by CVE-2024-27198 , an...