Happy Friday hackers! Nitesh @ideaengine007 found a critical RCE vulnerability in Jenkins that led us to discover a Bitcoin mining service running on a DoD website 
. Head over to the disclosed report to see all the details! Thanks for being 
Niteshhttps://hackerone.com/reports/768266
-
You need to be US citizen for the DOD bounty program right? Ive stumbled upon either a honeypot or axx to internal Active Directory info with usernames for contractors and stuff years ago. Tried contacting them, but gave up... maybe its closed now?
Not saying I require a bounty for the information :) Back then it was just impossible to discover who to contact... tried contacting the vendor that was responsible, but no answer. I have one demand though- I am not going through configuring PGP, nothing is worth that.