Hands-On Web Penetration Testing with Metasploit

Jenkins enumeration using Metasploit

Now that we have covered the manual way of enumerating Jenkins, let's move on and look at the Metasploit Framework's auxiliary jenkins_enum, which takes enumeration one step further.

The Metasploit module also has an auxiliary that uses methods similar to the ones described in the previous section to perform the recon. This includes looking for the response header value, that is, X-Jenkins, as well as the HTML source for the keyword. The auxiliary can be loaded using the following command:

use auxiliary/scanner/http/jenkins_enum

The following screenshot shows the output of the preceding command:

After ...