jenkins-job-wrecker vs pwn_jenkins

jenkins-job-wrecker

convert Jenkins job XML to JJB YAML (by ktdreyer)

Source Code

Suggest alternative

Edit details

pwn_jenkins

Notes about attacking Jenkins servers (by gquere)

Jenkins Pentest Hacking Exploit rce

Source Code

Suggest alternative

Edit details

Our great sponsors

InfluxDB - Power Real-Time Data Analytics at Scale

WorkOS - The modern identity platform for B2B SaaS

SaaSHub - Software Alternatives and Reviews

Our great sponsors

jenkins-job-wrecker		pwn_jenkins
	Project
1	Mentions	2
161	Stars	1,886
-	Growth	-
0.0	Activity	5.5
about 3 years ago	Latest Commit	10 days ago
Python	Language	Python
MIT License	License	-

The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

jenkins-job-wrecker

Posts with mentions or reviews of jenkins-job-wrecker. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2021-06-04.

Possible new trojan affecting Xcode builds spreading across Github (@ianosh tweet)
3 projects | /r/programming | 4 Jun 2021

But it's XML, not Yaml. However, you can use Jenkins job wrecker to get Yaml.

pwn_jenkins

Posts with mentions or reviews of pwn_jenkins. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2021-05-05.

CorePlague: Severe Vulnerabilities in Jenkins Server Lead to Remote Code Execution
1 project | /r/netsec | 9 Mar 2023

I did add it to the list though.
JAF is an internally developed, red team-oriented tool from Accenture for interacting with Jenkins build servers.
2 projects | /r/netsec | 5 May 2021

I'm maintaining a list of scripts and exploits for Jenkins here: https://github.com/gquere/pwn_jenkins

What are some alternatives?

When comparing jenkins-job-wrecker and pwn_jenkins you can also consider the following projects:

ftprivacy - A collection of ad block lists for Pi Hole, AdGuard Home, pfBlockerNG, uBlock Origin, and more... - https://ftprivacy.cloud

RomBuster - RomBuster is a router exploitation tool that allows to disclosure network router admin password.

nagios-plugins - 450+ AWS, Hadoop, Cloud, Kafka, Docker, Elasticsearch, RabbitMQ, Redis, HBase, Solr, Cassandra, ZooKeeper, HDFS, Yarn, Hive, Presto, Drill, Impala, Consul, Spark, Jenkins, Travis CI, Git, MySQL, Linux, DNS, Whois, SSL Certs, Yum Security Updates, Kubernetes, Cloudera etc...

CVE-2021-41773 - Apache2 2.4.49 - LFI & RCE Exploit - CVE-2021-41773

altwalker-jenkins-example - An example of a simple Jenkins Pipeline for AltWalker.

jklint - A Jenkinsfile linter CLI saving time linting Jenkinsfiles by only typing 1 argument in the command line.

jenkins-update-center - Jenkins mirror update center generator

DogWalk-rce-poc - 🐾Dogwalk PoC (using diagcab file to obtain RCE on windows)

jenkins-attack-framework