{
  "entrypoint_kind": "tcp_peer",
  "entrypoint_detail": "Jenkins inbound agent (JNLP/TCP) listener on port 50000; production JnlpSlaveAgentProtocol4 accept path; real JNLP4-connect handshake; crafted hudson.remoting.UserRequest over the established channel",
  "service_started": true,
  "healthcheck_passed": true,
  "target_path_reached": true,
  "runtime_stack": [
    "jenkins-controller(docker)",
    "jnlp4-inbound-agent-listener",
    "attack-agent(docker)"
  ],
  "target_identity": {
    "repository_url": "https://github.com/jenkinsci/remoting",
    "commit_sha": "60d89463d9e0ea0cfe92cd45581261d601314273",
    "target_digest": "sha256:16778c994cfc6e9a6dd364c1af946142e70c39cc4e5debe9119f78e4b67021dc",
    "runtime_digest": "sha256:16778c994cfc6e9a6dd364c1af946142e70c39cc4e5debe9119f78e4b67021dc",
    "platform": "linux",
    "architecture": "x86_64",
    "vulnerable_image": "jenkins/jenkins:2.575-jdk21 jenkins/jenkins@sha256:16778c994cfc6e9a6dd364c1af946142e70c39cc4e5debe9119f78e4b67021dc",
    "fixed_image": "jenkins/jenkins:2.576-jdk21 jenkins/jenkins@sha256:8c1c7e28b463e8dd93b01d5b1853e58c95e01214693355eeff8084b04dccd0a3",
    "vulnerable_remoting": "3384.v60d89463d9e0",
    "fixed_remoting": "3385.vf1123fb_515da_ (fix commit f1123fb515da74560db60645539019cfa77bce49)"
  },
  "proof_artifacts": [
    "logs/attempt-fixed-1/agent.log",
    "logs/attempt-fixed-1/controller.log",
    "logs/attempt-fixed-2/agent.log",
    "logs/attempt-fixed-2/controller.log",
    "logs/attempt-vuln-1/CONTROLLER_PWNED_security3911-vuln-1-1786004490.txt",
    "logs/attempt-vuln-1/CONTROLLER_PWNED_security3911-vuln-1-1786004798.txt",
    "logs/attempt-vuln-1/agent.log",
    "logs/attempt-vuln-1/controller.log",
    "logs/attempt-vuln-2/CONTROLLER_PWNED_security3911-vuln-2-1786004490.txt",
    "logs/attempt-vuln-2/CONTROLLER_PWNED_security3911-vuln-2-1786004798.txt",
    "logs/attempt-vuln-2/agent.log",
    "logs/attempt-vuln-2/controller.log",
    "logs/attempt_results.txt",
    "logs/fixed_filtered_fallback.txt",
    "logs/fixed_war_manifest.txt",
    "logs/harness_sha256.txt",
    "logs/reproduction_steps.log",
    "logs/vuln_unfiltered_fallback.txt",
    "logs/vuln_war_manifest.txt",
    "repro/security3911-fix.diff",
    "repro/negative_control_observation.json"
  ],
  "notes": "Two clean attempts per role. Vulnerable: payload readObject/call executed /bin/sh inside the controller container (marker file with id output) and dialed an outbound TCP callback to the attacker listener. Fixed: SecurityException 'Rejected: hudson.security3911.Payload' from jenkins.security.ClassFilterImpl; no marker, no callback. overall_success=0"
}