Glasswork

Premium Machine (Locked)

A Jenkins instance was stood up for CI/CD and never locked down. Default credentials open the Groovy Script Console — from there, code execution is a one-liner. Follow the shell through the build server and abuse a sudo wget policy to overwrite your way to root.