Butler Machine (TCM Security) — Step-by-Step Walkthrough

Compromise of a Windows machine via Jenkins default credentials and Groovy script RCE, followed by privilege escalation through an unquoted service path vulnerability in the WiseBootAssistant service.