pwn_jenkins
A collection of notes, scripts, and techniques for exploiting vulnerabilities and attacking Jenkins servers.
What is pwn_jenkins?
pwn_jenkins is a security research repository focused on attacking Jenkins automation servers. It documents critical vulnerabilities, provides exploitation scripts, and details post-compromise techniques for red teamers and penetration testers. The project serves as a practical guide for assessing and exploiting insecure Jenkins deployments.
Security researchers, penetration testers, and red team operators who need to audit or exploit Jenkins servers in authorized engagements.
It consolidates scattered Jenkins attack vectors into a single, actionable resource with working exploit code and scripts, saving time for security professionals during assessments.
Overview
Notes about attacking Jenkins servers
Use Cases
Best For
- Penetration testing Jenkins servers in corporate environments
- Exploiting specific CVEs like CVE-2024-23897 for arbitrary file reads
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
