CVE-2018-1999002

This exploit chains CVE-2019-1003000 and CVE-2018-1999002 to achieve pre-authentication remote code execution in Jenkins by leveraging vulnerable plugins (Pipeline: Declarative, Pipeline: Groovy, Script Security). It generates a malicious Java payload, hosts it on a local web server, and triggers its execution via a crafted HTTP request to the Jenkins server.

This repository contains functional exploit code for CVE-2016-10709, targeting the HackSys Extreme Vulnerable Driver (HEVD) with a stack overflow vulnerability. The exploit includes shellcode for token stealing and privilege escalation on Windows 10 x64 systems.

This repository contains a functional exploit for CVE-2018-1999002 and CVE-2019-1003000, chaining vulnerabilities in Jenkins plugins to achieve pre-authentication remote code execution via a crafted HTTP request and malicious payload delivery.

This exploit chains CVE-2019-1003000 and CVE-2018-1999002 to achieve pre-authentication remote code execution in Jenkins by leveraging vulnerable plugins (Pipeline: Declarative, Pipeline: Groovy, Script Security). It generates a malicious Java payload, hosts it via a simple HTTP server, and triggers execution via a crafted HTTP request.