CVE-2024-27199

This repository contains a functional exploit for CVE-2024-27198, targeting JetBrains TeamCity. The exploit creates an admin user and achieves RCE by leveraging an authentication bypass vulnerability in the REST API endpoint.

This repository contains a functional exploit for CVE-2024-27198, targeting TeamCity's plugin upload mechanism to achieve remote code execution (RCE). The exploit automates the process of uploading a malicious plugin, leveraging authentication tokens and CSRF protection bypasses.