CI-PIPELINE-RCEExecution

Jenkins Script Console RCE

Jenkins /script Groovy console reachable unauth or with weak creds — Groovy exec() = RCE as Jenkins master.

§ Where this technique fits

CI-PIPELINE-RCE is catalogued under the Execution tactic of the offensive-security kill-chain. It appears in 1 approved dossier in the registry, typically at step 3 on average.

§ Dossiers chaining this technique

Jenkins /script Groovy console → RCE → AD
Jenkins script console exposed unauth on the corporate intranet — Groovy 'execute()' = RCE as the Jenkins service account, often a domain user with broad agent access.
step 3 / 6

§ What commonly comes next

01
Command and Scripting Interpreter
T1059 · Execution
seen 1×

§ Where this technique fits

§ Dossiers chaining this technique

Jenkins /script Groovy console → RCE → AD

§ What commonly comes next