pwn_jenkins vs jenkins-job-wrecker

pwn_jenkins

Notes about attacking Jenkins servers (by gquere)

Source Code

Suggest alternative

Edit details

jenkins-job-wrecker

convert Jenkins job XML to JJB YAML (by ktdreyer)

Jenkins YAML Job

Source Code

Suggest alternative

Edit details

Our great sponsors

WorkOS - The modern identity platform for B2B SaaS

InfluxDB - Power Real-Time Data Analytics at Scale

SaaSHub - Software Alternatives and Reviews

Our great sponsors

pwn_jenkins		jenkins-job-wrecker
	Project
2	Mentions	1
1,890	Stars	161
-	Growth	-
5.7	Activity	0.0
19 days ago	Latest Commit	about 3 years ago
Python	Language	Python
-	License	MIT License

The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

pwn_jenkins

Posts with mentions or reviews of pwn_jenkins. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2021-05-05.

CorePlague: Severe Vulnerabilities in Jenkins Server Lead to Remote Code Execution
1 project | /r/netsec | 9 Mar 2023

I did add it to the list though.
JAF is an internally developed, red team-oriented tool from Accenture for interacting with Jenkins build servers.
2 projects | /r/netsec | 5 May 2021

I'm maintaining a list of scripts and exploits for Jenkins here: https://github.com/gquere/pwn_jenkins

jenkins-job-wrecker

Posts with mentions or reviews of jenkins-job-wrecker. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2021-06-04.

Possible new trojan affecting Xcode builds spreading across Github (@ianosh tweet)
3 projects | /r/programming | 4 Jun 2021

But it's XML, not Yaml. However, you can use Jenkins job wrecker to get Yaml.

What are some alternatives?

When comparing pwn_jenkins and jenkins-job-wrecker you can also consider the following projects:

RomBuster - RomBuster is a router exploitation tool that allows to disclosure network router admin password.

ftprivacy - A collection of ad block lists for Pi Hole, AdGuard Home, pfBlockerNG, uBlock Origin, and more... - https://ftprivacy.cloud

CVE-2021-41773 - Apache2 2.4.49 - LFI & RCE Exploit - CVE-2021-41773

nagios-plugins - 450+ AWS, Hadoop, Cloud, Kafka, Docker, Elasticsearch, RabbitMQ, Redis, HBase, Solr, Cassandra, ZooKeeper, HDFS, Yarn, Hive, Presto, Drill, Impala, Consul, Spark, Jenkins, Travis CI, Git, MySQL, Linux, DNS, Whois, SSL Certs, Yum Security Updates, Kubernetes, Cloudera etc...

jklint - A Jenkinsfile linter CLI saving time linting Jenkinsfiles by only typing 1 argument in the command line.

altwalker-jenkins-example - An example of a simple Jenkins Pipeline for AltWalker.

jenkins-update-center - Jenkins mirror update center generator

DogWalk-rce-poc - 🐾Dogwalk PoC (using diagcab file to obtain RCE on windows)

jenkins-attack-framework