Jenkins credentials.xml decryptor

script_console.groovy

import static hudson.util.Secret.decrypt

void printEntry(credential, attr) {
  def text = credential."${attr.toLowerCase()}".text()
  println("${attr}: ${text}")
}

def text = new File('/var/lib/jenkins/credentials.xml').text

def list = new XmlParser().parseText(text).domainCredentialsMap.entry.'java.util.concurrent.CopyOnWriteArrayList'.'*'


for (i in list) {
  switch (i.name()) {
    case 'com.cloudbees.jenkins.plugins.sshcredentials.impl.BasicSSHUserPrivateKey':
    	println("[SSH Private Key]")
    	printEntry(i, 'Scope')
    	printEntry(i, 'ID')
    	printEntry(i, 'Description')
    	printEntry(i, 'Username')   // TODO encypted case
    	println('Private key:')
    	println(decrypt(i.privateKeySource.privateKey.text()))
    	
    	break
    case 'com.cloudbees.plugins.credentials.impl.UsernamePasswordCredentialsImpl':
    	println("[Username & Password]")
    	printEntry(i, 'Scope')
    	printEntry(i, 'ID')
    	printEntry(i, 'Description')
    	printEntry(i, 'Username')
	println("Password: ${decrypt(i.password.text())}")
    
    	break
    case 'org.jenkinsci.plugins.plaincredentials.impl.StringCredentialsImpl':
    	println("[Secret text]")
    	printEntry(i, 'Scope')
    	printEntry(i, 'ID')
    	printEntry(i, 'Description')
    	println("Secret: ${decrypt(i.secret.text())}")

    	break
    default:
        println("[Not implemented yet]")
      	println(i)
  }

  println()
}