https://blog-ga2.pages.dev/tags/jenkins/ Recent content in Jenkins on burkocyigit Hugo en No rights reserved. Fri, 14 Aug 2026 20:00:00 +0300 https://blog-ga2.pages.dev/posts/builder/ Fri, 14 Aug 2026 20:00:00 +0300 https://blog-ga2.pages.dev/posts/builder/ Walkthrough of HackTheBox Builder — exploiting Jenkins 2.441 arbitrary file read (CVE-2024-23897) to extract credentials, cracking bcrypt hashes, and using Jenkins Script Console for RCE. https://blog-ga2.pages.dev/posts/jeeves/ Thu, 13 Aug 2026 20:00:00 +0300 https://blog-ga2.pages.dev/posts/jeeves/ Walkthrough of HackTheBox Jeeves — discovering an unprotected Jenkins instance on Jetty, Groovy Script Console reverse shell, SeImpersonatePrivilege escalation with JuicyPotato, and NTFS ADS flag recovery.