diff --git a/documentation/modules/exploit/multi/misc/teamcity_agent_xmlrpc_exec.md b/documentation/modules/exploit/multi/misc/teamcity_agent_xmlrpc_exec.md index d7456dfaa1..e66588bdf3 100644 --- a/documentation/modules/exploit/multi/misc/teamcity_agent_xmlrpc_exec.md +++ b/documentation/modules/exploit/multi/misc/teamcity_agent_xmlrpc_exec.md @@ -2,6 +2,8 @@ This module allows remote code execution on TeamCity Agents configured to use bidirectional communication via xml-rpc. In bidirectional mode the TeamCity server pushes build commands to the Build Agents over port TCP/9090 without requiring authentication. Up until version 10 this was the default configuration. This module supports TeamCity agents from version 6.0 onwards. +This module makes use of both a Windows and a Linux command stager. For Linux, the `echo` command stager flavor was replaced with the `printf` command stager flavor due to portability issues associated with `echo` and its options. + ## Vulnerable Application This module has been tested successfully with the following TeamCity Agent versions @@ -57,4 +59,4 @@ msf5 exploit(multi/misc/teamcity_agent_xmlrpc_exec) > run meterpreter > getuid Server username: NT AUTHORITY\SYSTEM -``` \ No newline at end of file +```