How I got access to your organization's private Git and production infrastructure / My Research on Misconfigured Jenkins Servers

No ratings

Presented at BSidesLondon 2018 by

Mikail Tunç

In this talk, I will be covering some research I did whereby I discovered tens of thousands of misconfigured Jenkins (CI/CD) servers on the internet and how they led to some interesting findings.I'll briefly go through the severity of the issues discovered, where I found them and the responses I received. Lastly I'll discuss some lessons to be learned and how we can use these lessons to collectively improve the security posture of our infrastructure.