## https://sploitus.com/exploit?id=835F5897-FB80-531D-AA10-D81FCE201F32
PoC exploit for CVE-2019-1003000, CVE-2019-1003001, CVE-2019-1003002: Script Security, Pipeline: Groovy, Pipeline: Declarative. This PoC allows users with Overall/Read permission and Job/Configure (and optional Job/Build) to bypass the sandbox protection and execute arbitrary code on the Jenkins master or node. The exploit uses a user with Overall/Read and Job/Configure permission to execute a maliciously modified build script in sandbox mode, and tries to bypass the sandbox mode limitation in order to run arbitrary scripts. The payload is defined as a Groovy script that uses the @Grab annotation to import arbitrary Java packages from an external Maven repository, and then uses the ProcBuilder class to run a system shell command. The exploit is typically invoked by running the exploit.py script with the target URL, job name, username/password credential, and system command as arguments. The expected impact is remote code execution, and the observable network or file artifacts/IO include the modified job configuration and the output of the executed system command.