> For the complete documentation index, see [llms.txt](https://notes.programmersecurity.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.programmersecurity.com/cms-pentesting/jenkins.md).

# Jenkins

## Jenkins Credentials Decryptor

if you have the Jenkins configuration files, which contain credentials.xml, config.xml, master.key, and hudson.util.secret. then you can decrypt the password from that using this <https://github.com/hoto/jenkins-credentials-decryptor>

{% code overflow="wrap" %}

```python
./jenkins-credentials-decryptor -c ./jenkins_configuration/jobs/build/config.xml -m ./jenkins_configuration/secrets/master.key -s ./jenkins_configuration/secrets/hudson.util.Secret
```

{% endcode %}

<figure><img src="/files/BAAB5VTobUEeYwPR1tyg" alt=""><figcaption></figcaption></figure>