# Exploitation

> RCE via Groovy console, CVE-2024-23897 file read, credential theft

- **URL:** https://hackindex.io/services/jenkins/exploitation
- **Service:** [Jenkins](https://hackindex.io/services/jenkins.md)
- **Published:** 2026-09-14
- **Updated:** 2026-09-14

## Guides

- [Jenkins Arbitrary File Read (CVE-2024-23897)](https://hackindex.io/services/jenkins/exploitation/jenkins-arbitrary-file-read-cve-2024-23897.md): Exploits CVE-2024-23897 in Jenkins CLI to read arbitrary files via argument interpolation, enabling credential theft and potential RCE.
- [Jenkins Credential Extraction](https://hackindex.io/services/jenkins/exploitation/jenkins-credential-extraction.md): Exploiting Jenkins to extract stored credentials via Groovy script console, API endpoints, or credential manager misconfigurations for lateral movement.
- [Jenkins Groovy Console RCE](https://hackindex.io/services/jenkins/exploitation/jenkins-groovy-console-rce.md): Exploit Jenkins' Groovy Script Console to execute arbitrary system commands and achieve RCE on the host via unauthenticated or authenticated access.