TeamCity Agent XML-RPC Command Execution
Posted by deepcore on November 29, 2018 – 11:56 pm
This Metasploit module allows remote code execution on TeamCity Agents configured to use bidirectional communication via xml-rpc. In bidirectional mode the TeamCity server pushes build commands to the Build Agents over port TCP/9090 without requiring authentication. Up until version 10 this was the default configuration. This Metasploit module supports TeamCity agents from version 6.0 onwards.
Post a reply
You must be logged in to post a comment.