Jenkins Domain Credential Recovery

This module will collect Jenkins domain credentials, and uses the script console to decrypt each password if anonymous permission is allowed. It has been tested against Jenkins version 1.590, 1.633, and 1.638. This module requires Metasploit: https://metasploit.com/download Current source:...

Jenkins 1.633 - Unauthenticated Credential Recovery Vulnerability

Exploit for java platform in category web applications Exploit Title: Jenkins Unauthenticated Credential Recovery Disclosure Date: 10/14/2015 Response Date: 10/14/2015 Response: "Recommend this be rejected as a vulnerability." Full report including response:...

Jenkins 1.633 - Credential Recovery

Jenkins 1.633 - Credential Recovery Exploit Title: Jenkins Unauthenticated Credential Recovery Disclosure Date: 10/14/2015 Response Date: 10/14/2015 Response: "Recommend this be rejected as a vulnerability." Full report including response: http://www.th3r3p0.com/vulns/jenkins/jenkinsVuln.html...