Continuous Intrusion: Why CI Tools Are An Attacker's Best Friends
summary
Nikhil Mittal examines how Continuous Integration (CI) tools (both popular open-source and proprietary systems) can be abused by attackers because of weak security, distributed build capabilities, and high privileges. The presentation demonstrates using built-in CI features to perform command/script execution, credential theft, and privilege escalation to compromise build systems, host OSes, and entire Windows domains — all without exploiting memory bugs — with live demonstrations.
AI-written summary · about
chapters (14)
- 0:00Start
- 2:40What Are Continuous Integration Tools
- 6:01Jenkins
- 7:01Security Issues with Jenkins
- 9:01Who Uses Windows for Jenkins Server
- 10:33Abusing Build Steps
- 13:29Storing Credentials
- 16:34Live Demonstrations
- 17:34Command Execution
- 18:16Add a Build Step
- 21:41Decrypt Credentials
- 27:22Dream City
- 42:38Security Issues
- 51:02Demo of a Penetration Test Scenario
related talks
51mHow hackers can breach your C.I / C.D systems
39mContinuous Security at the Next Level
29mAbusing CI/CD - Top Ways to Reach Production
45mDefending CI/CD against attacks
28mStandard Classification: Threat Modeling the CI/CD Pipeline to Improve Softwar...
34mHijacking Google’s CI/CD Through Prompt Injection:The New Era of AI-Based Exploits
48mCI/CD Security
05mKeynote: Why Developer Laptop Security is Key to Securing Your CI/CD Pipeline