Offensively Groovy is a repository that documents how to use Groovy scripts for post-exploitation purposes. The project explores malicious capabilities of Groovy both for Windows and none-specific Operating Systems.
| Script | Description | Operating System |
|---|---|---|
dll.groovy |
Load a DLL into Jenkins | Windows |
ps.groovy |
Enumerate running processes with WinAPI | Windows |
sc.groovy |
Enumerate services with WinAPI | Windows |
shellcode.groovy |
Execute shellcode commands with WinAPI | Windows |
cat.groovy |
Display the contents of a file | Cross-platform |
creds.groovy |
Extract Jenkins credentials | Cross-platform |
engines.groovy |
List and manipulate Jenkins script engines | Cross-platform |
env.groovy |
Dump environment variables | Cross-platform |
executors.groovy |
List Jenkins executors | Cross-platform |
exfil.groovy |
Exfiltrate data over HTTP | Cross-platform |
hostname.groovy |
Retrieve the system's hostname | Cross-platform |
ls.groovy |
List directory contents | Cross-platform |
nodes.groovy |
Enumerate Jenkins nodes | Cross-platform |
oscmd.groovy |
Execute arbitrary OS commands | Cross-platform |
start_process.groovy |
Start a background process | Cross-platform |
sysinfo.groovy |
Retrieve system information | Cross-platform |
sysprops.groovy |
Display system properties | Cross-platform |
upload.groovy |
Upload files to Jenkins | Cross-platform |
ver.groovy |
Retrieve the OS version | Cross-platform |
whoami.groovy |
Identify the current user | Cross-platform |