## https://sploitus.com/exploit?id=515E7064-1AD2-5ADB-9085-3003F496577B
PoC exploit for CVE-2019-1003000, CVE-2019-1003001, and CVE-2019-1003002, which are related to a vulnerability in Jenkins' Script Security, Pipeline: Groovy, and Pipeline: Declarative plugins. The exploit allows users with Overall/Read permission and Job/Configure (and optional Job/Build) to bypass the sandbox protection and execute arbitrary code on the Jenkins master or node. The exploit uses a maliciously modified build script in sandbox mode to run arbitrary scripts, including system commands. The payload is defined in the `exploit.py` file, which uses the `ProcBuilder` class to run system shell commands. The exploit is typically invoked by running `python exploit.py` with the target URL, job name, username/password credential, and system command as arguments.