CVE-2019-1003030

This exploit bypasses the Groovy sandbox in Jenkins 2.63 by sending a crafted HTTP GET request to execute arbitrary commands via the SecureGroovyScript endpoint. The payload URL-encodes a Groovy class that executes a ping command, demonstrating RCE.

This repository contains a functional exploit for CVE-2019-1003030, a Jenkins RCE vulnerability. The script leverages the Jenkins Script Security Plugin's sandbox bypass to upload and execute a reverse shell.