jenkins-api-panel: Jenkins API Instance Detection Template

漏洞描述

Try to detect the presence of a Jenkins API instance via the API default XML endpoint

PoC代码[已公开]

id: jenkins-api-panel

info:
  name: Jenkins API Instance Detection Template
  author: righettod
  severity: info
  verified: true
  description: |-
    Try to detect the presence of a Jenkins API instance via the API default XML endpoint
  tags: jenkins,api,panel,default,admin,credentials
  created: 2023/06/17

rules:
  r0:
    request:
      method: GET
      path: /api/xml
    expression: response.status == 200 && response.body.bcontains(b"hudson.model.Hudson")
expression: r0()

来源: https://github.com/zan8in/afrog/blob/main/pocs/afrog-pocs/fingerprinting/jenkins-api-panel.yaml