CVE-2020-35667

This repository contains a functional PoC for CVE-2020-35667, exploiting an XML-RPC authentication bypass in JetBrains TeamCity. The PoC simulates a fake TeamCity server to bypass server recognition and authentication checks by responding to specific XML-RPC method calls.

This repository contains a functional proof-of-concept for CVE-2020-35667, demonstrating an SSRF vulnerability in the IntelliJ IDEA TeamCity integration plugin. The exploit leverages insufficient URL validation to force the plugin to make authenticated requests to an attacker-controlled server, leading to credential leakage.