pwn_jenkins

Ejecución remota de código Lectura arbitraria del CLI de Jenkins CVE-2024-23897 afecta a versiones anteriores a 2.442 y a la LTS 2.426.3 Aviso de Jenkins, Créditos Autenticado, puede recuperar un archivo completo: java -jar jenkins-cli.jar -noCertificateCheck -s https://xxx.yyy/jenkins -auth...

Jenkins 2.137 and Pipeline Groovy Plugin 2.61 - ACL Bypass and Metaprogramming RCE Exploit

This Metasploit module exploits a vulnerability in Jenkins dynamic routing to bypass the Overall/Read ACL and leverage Groovy metaprogramming to download and execute a malicious JAR file. The ACL bypass gadget is specific to Jenkins versions 2.137 and below and will not work on later versions of...