加入jenkins未授权访问检测

pkg/httpx/runner/runner.go

@@ -898,6 +898,9 @@ retry:
 					technologies = append(technologies, fmt.Sprintf("fastjson|%s", fastjsonversion))
 				}
 			case "Jenkins":
+				if jenkins.Unauthorized(URL.String()) {
+					technologies = append(technologies, "exp-jenkins|Unauthorized script")
+				}
 				if jenkins.CVE_2018_1000110(URL.String()) {
 					technologies = append(technologies, "exp-jenkins|CVE_2018_1000110")
 				}

poc/jenkins/Unauthorized.go

@@ -0,0 +1,27 @@
+package jenkins
+
+import (
+	"fmt"
+	"github.com/veo/vscan/pkg"
+	"strings"
+)
+
+func Unauthorized(u string) bool {
+	if req, err := pkg.HttpRequset(u, "GET", "", false, nil); err == nil {
+		if req.Header.Get("X-Jenkins-Session") != "" {
+			if req2, err := pkg.HttpRequset(u+"/script", "GET", "", false, nil); err == nil {
+				if req2.StatusCode == 200 && strings.Contains(req2.Body, "Groovy script") {
+					fmt.Printf("jenkins-exp-sucess|Unauthorized script|%s\n", u+"/script")
+					return true
+				}
+			}
+			if req2, err := pkg.HttpRequset(u+"/computer/(master)/scripts", "GET", "", false, nil); err == nil {
+				if req2.StatusCode == 200 && strings.Contains(req2.Body, "Groovy script") {
+					fmt.Printf("jenkins-exp-sucess|Unauthorized script|%s\n", u+"/computer/(master)/scripts")
+					return true
+				}
+			}
+		}
+	}
+	return false
+}