CVE-2016-0792

This Metasploit module exploits CVE-2016-0792, a deserialization vulnerability in Jenkins versions older than 1.650 and LTS versions older than 1.642.2. It leverages unsafe deserialization in XStream with Groovy in the classpath to achieve remote code execution without requiring authentication.

This exploit leverages a deserialization vulnerability in Jenkins (CVE-2016-0792) to achieve remote code execution by crafting a malicious XML payload. It checks the target's version and sends a POST request to trigger the payload execution.

This repository contains a functional exploit for CVE-2016-0792, a deserialization vulnerability in Jenkins. The exploit leverages XStream deserialization to execute arbitrary commands via a crafted XML payload.

This repository contains a functional exploit for CVE-2016-0792, which targets Jenkins by creating a job with a malicious shell command payload. The exploit leverages Jenkins' job creation API to achieve remote code execution (RCE).

This repository contains a functional Python exploit for CVE-2016-0792, a deserialization vulnerability in Jenkins. The exploit crafts a malicious XML payload to achieve remote code execution (RCE) on vulnerable Jenkins instances by leveraging Groovy's MethodClosure and ProcessBuilder.

This Metasploit module exploits CVE-2016-0792, a deserialization vulnerability in Jenkins (pre-1.650/LTS pre-1.642.2) via XStream with Groovy in the classpath. It leverages unsafe deserialization to achieve remote code execution without authentication.