jenkins-update-center vs pwn_jenkins

jenkins-update-center

Jenkins mirror update center generator (by lework)

Source Code

Suggest alternative

Edit details

pwn_jenkins

Notes about attacking Jenkins servers (by gquere)

Jenkins Pentest Hacking Exploit rce

Source Code

Suggest alternative

Edit details

Our great sponsors

InfluxDB - Power Real-Time Data Analytics at Scale

WorkOS - The modern identity platform for B2B SaaS

SaaSHub - Software Alternatives and Reviews

Our great sponsors

jenkins-update-center		pwn_jenkins
	Project
1	Mentions	2
38	Stars	1,890
-	Growth	-
9.5	Activity	5.7
4 days ago	Latest Commit	19 days ago
Python	Language	Python
MIT License	License	-

The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

jenkins-update-center

Posts with mentions or reviews of jenkins-update-center. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2021-10-27.

local update server - complains about digest?
3 projects | /r/jenkinsci | 27 Oct 2021

I have not found any solutions to this part of the "corporate jenkins update site" instructions/recommendations found in several sites: https://github.com/ikedam/backend-update-center2/wiki/How-to-create-your-own-Jenkins-Update-Center https://github.com/lework/jenkins-update-center https://medium.com/@prabhas.gupte/how-to-setup-custom-jenkins-update-center-d4bd6d3772d5 https://www.north-47.com/knowledge-base/update-jenkins-plugins-behind-a-corporate-proxy/ https://www.jenkins.io/blog/2015/07/14/juseppe-a-custom-update-site-for-jenkins/ https://support.cloudbees.com/hc/en-us/articles/115000494608-Why-is-there-Failed-Signature-Check-when-using-update-server-

pwn_jenkins

Posts with mentions or reviews of pwn_jenkins. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2021-05-05.

CorePlague: Severe Vulnerabilities in Jenkins Server Lead to Remote Code Execution
1 project | /r/netsec | 9 Mar 2023

I did add it to the list though.
JAF is an internally developed, red team-oriented tool from Accenture for interacting with Jenkins build servers.
2 projects | /r/netsec | 5 May 2021

I'm maintaining a list of scripts and exploits for Jenkins here: https://github.com/gquere/pwn_jenkins

What are some alternatives?

When comparing jenkins-update-center and pwn_jenkins you can also consider the following projects:

update-center2 - Jenkins Update Center backend

jenkins-job-wrecker - convert Jenkins job XML to JJB YAML

backend-update-center2 - Update center backend

RomBuster - RomBuster is a router exploitation tool that allows to disclosure network router admin password.

cicd-goat - A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

CVE-2021-41773 - Apache2 2.4.49 - LFI & RCE Exploit - CVE-2021-41773

docker-android - Android in docker solution with noVNC supported and video recording

jklint - A Jenkinsfile linter CLI saving time linting Jenkinsfiles by only typing 1 argument in the command line.

nagios-plugins - 450+ AWS, Hadoop, Cloud, Kafka, Docker, Elasticsearch, RabbitMQ, Redis, HBase, Solr, Cassandra, ZooKeeper, HDFS, Yarn, Hive, Presto, Drill, Impala, Consul, Spark, Jenkins, Travis CI, Git, MySQL, Linux, DNS, Whois, SSL Certs, Yum Security Updates, Kubernetes, Cloudera etc...

DogWalk-rce-poc - 🐾Dogwalk PoC (using diagcab file to obtain RCE on windows)