jenkins-api-panel: Jenkins API Instance Detection Template

2025-08-01 jenkins-api-panel PoC Public

Description

Try to detect the presence of a Jenkins API instance via the API default XML endpoint

PoC

id: jenkins-api-panel

info:
  name: Jenkins API Instance Detection Template
  author: righettod
  severity: info
  verified: true
  description: |-
    Try to detect the presence of a Jenkins API instance via the API default XML endpoint
  tags: jenkins,api,panel,default,admin,credentials
  created: 2023/06/17

rules:
  r0:
    request:
      method: GET
      path: /api/xml
    expression: response.status == 200 && response.body.bcontains(b"hudson.model.Hudson")
expression: r0()

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://github.com/zan8in/afrog/blob/main/pocs/afrog-pocs/fingerprinting/jenkins-api-panel.yaml

References

Related Vulnerabilities