Exploiting Jenkins -Jenkins - tool used to create continuous integration/continuous development pipelines that allow developers to deploy their code once changes are made automatically

Nishang to gain inital access

  1. scan Ip nmap -sC -sV Ip -sC: run default scripts -sV: enumerate applications versions

  2. Explore options -8080 -admin/admin login/pw

  3. RCE to Reverse Shell -Nishang Powershell TCP Reverse Shell

  4. set up a http server python3 -m http.server