From S3 bucket to Jenkins credential dump (Research)

NCC Group’s pentest uncovered an exposed S3 bucket with directory listing that contained a script embedding a hardcoded Git credential; this allowed researchers to access a Jenkins instance, escalate to admin, and extract sensitive credentials (AWS tokens, SSH certificates), illustrating how cloud misconfigurations and embedded secrets can lead to CI/CD compromise and credential theft.