Jenkins

A walkthrough for the “Builder” machine on Hack The Box, demonstrating the exploitation of a Jenkins arbitrary file read vulnerability (CVE-2024-23897) to retrieve credentials and the decryption of stored SSH keys via the Script Console for privilege escalation.