infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

note about cmd_stager flavor

GSoC/Meterpreter_Web_Console
Shelby Pace 2018-11-27 14:46:19 -06:00
parent 56f14733a9
commit 064c79a4ae
No known key found for this signature in database
GPG Key ID: B2F3A8B476406857
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
documentation/modules/exploit/multi/misc/teamcity_agent_xmlrpc_exec.md
View File

@ -2,6 +2,8 @@
This module allows remote code execution on TeamCity Agents configured to use bidirectional communication via xml-rpc. In bidirectional mode the TeamCity server pushes build commands to the Build Agents over port TCP/9090 without requiring authentication. Up until version 10 this was the default configuration. This module supports TeamCity agents from version 6.0 onwards.
This module makes use of both a Windows and a Linux command stager. For Linux, the `echo` command stager flavor was replaced with the `printf` command stager flavor due to portability issues associated with `echo` and its options.
## Vulnerable Application
This module has been tested successfully with the following TeamCity Agent versions
@ -57,4 +59,4 @@ msf5 exploit(multi/misc/teamcity_agent_xmlrpc_exec) > run
meterpreter > getuid
Server username: NT AUTHORITY\SYSTEM
```
```