Remote Code Execution in Jenkins CLI via Java Deserialization

This repository contains a single Metasploit module: 'jenkins_java_deserialize.rb', which exploits CVE-2015-8103, a Java deserialization vulnerability in Jenkins (version 1.637 and below). The exploit leverages the Jenkins CLI RMI endpoint to achieve unauthenticated remote code execution by sending a malicious serialized Java object. The module is highly weaponized, allowing the attacker to select and deliver arbitrary Metasploit payloads (such as command or shell) to the target. The exploit requires network access to the Jenkins HTTP port (default 8080) and optionally the CLI port, which is discovered via the 'X-Jenkins-CLI-Port' HTTP header. The payload is written to a temporary directory (default /tmp) on the target. The code is structured as a typical Metasploit module, with options for target URI, temporary directory, and port configuration. The module is operational and ready for use within the Metasploit framework.

This repository contains a single Metasploit module (modules/exploits/linux/misc/opennms_java_serialize.rb) that exploits a Java object deserialization vulnerability (CVE-2015-8103) in OpenNMS. The exploit targets the Java RMI service (default port 1099) exposed by OpenNMS on Linux systems. It works by sending a malicious serialized object to the RMI service, which triggers arbitrary code execution. The module sets up an HTTP server to host a payload (typically a reverse shell or meterpreter ELF binary), instructs the target to download it via wget to a writable directory (default /tmp/), makes it executable, and then runs it. The exploit is fully weaponized, allowing the attacker to select and customize payloads using the Metasploit framework. The only file in the repository is the exploit module itself, written in Ruby and structured according to Metasploit conventions.