Jenkins Attack Framework
At my previous employer (FusionX/Accenture), I wrote a tool for RedTeam security people to help attack and exploit vulnerabilities in Jenkins Applications. These attacks are for the most part publicly known, but are time consuming to execute by hand.