nuclei-templates/http/exposed-panels/gitlab-detect.yaml

id: gitlab-detect

info:
  name: Gitlab Login Panel - Detect
  author: ehsahil
  severity: info
  description: Gitlab login panel was detected.
  classification:
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
    cwe-id: CWE-200
    cpe: cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
  metadata:
    max-request: 1
    vendor: gitlab
    product: gitlab
    shodan-query: http.title:"GitLab"
  tags: panel,gitlab

http:
  - method: GET
    path:
      - "{{BaseURL}}/users/sign_in"

    host-redirects: true
    max-redirects: 2

    matchers-condition: and
    matchers:
      - type: word
        words:
          - 'GitLab'
          - 'https://about.gitlab.com'
        condition: and

      - type: status
        status:
          - 200
# digest: 4a0a00473045022100d56a92dde2aacda701c500b2de34069d556cd1fdc051721b14af032e284b693402207b0942e665c7d497fca1f70f6b0bf6e9c686b1e2d976816d88facae679e1f7aa:922c64590222798bb761d5b6d8e72950
:abcd: Justifying id's 2020-09-01 02:25:25 +00:00			`id: gitlab-detect`
Gitlab Detect Fingerprinting Gitlab can help the hacker in multiple ways, Sometimes hackers can find the signup or explore option open and using these he can escalate the access further. 2020-04-07 10:08:21 +00:00
			`info:`
Dashboard Content Enhancements (#6105) Dashboard Content Enhancements 2022-11-19 01:50:30 +00:00			`name: Gitlab Login Panel - Detect`
Gitlab Detect Fingerprinting Gitlab can help the hacker in multiple ways, Sometimes hackers can find the signup or explore option open and using these he can escalate the access further. 2020-04-07 10:08:21 +00:00			`author: ehsahil`
uniform severity update 2020-08-03 21:52:00 +00:00			`severity: info`
Dashboard Content Enhancements (#6105) Dashboard Content Enhancements 2022-11-19 01:50:30 +00:00			`description: Gitlab login panel was detected.`
			`classification:`
			`cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N`
			`cwe-id: CWE-200`
Add CPE classification to templates (#9420) * Add CPE classification to templates * misc fix * added tags * format updates * Revert "format updates" This reverts commit b93658be4b50c929d15082258e4d11a15b12cbd8. --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2024-03-26 08:03:04 +00:00			`cpe: cpe:2.3:a:gitlab:gitlab:::::community:::*`
GitLab metadata update 2022-03-02 07:35:29 +00:00			`metadata:`
TemplateMan Update [Sat Mar 23 09:28:19 UTC 2024] :robot: 2024-03-23 09:28:19 +00:00			`max-request: 1`
TemplateMan Update [Mon Apr 8 11:30:07 UTC 2024] :robot: 2024-04-08 11:30:07 +00:00			`vendor: gitlab`
Add mass vendor and product info to templates 2024-02-22 00:55:04 +00:00			`product: gitlab`
GitLab metadata update 2022-03-02 07:35:29 +00:00			`shodan-query: http.title:"GitLab"`
Added technology tags (#3470) 2022-01-03 16:06:23 +00:00			`tags: panel,gitlab`
Gitlab Detect Fingerprinting Gitlab can help the hacker in multiple ways, Sometimes hackers can find the signup or explore option open and using these he can escalate the access further. 2020-04-07 10:08:21 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2023-04-27 04:28:59 +00:00			`http:`
Gitlab Detect Fingerprinting Gitlab can help the hacker in multiple ways, Sometimes hackers can find the signup or explore option open and using these he can escalate the access further. 2020-04-07 10:08:21 +00:00			`- method: GET`
			`path:`
			`- "{{BaseURL}}/users/sign_in"`
severity updates 2020-09-20 12:57:43 +00:00
Using "host-redirects" instead of "redirects" to avoid scanning 3rd party / out of scope hosts. (#5491) 2022-10-07 21:27:25 +00:00			`host-redirects: true`
severity updates 2020-09-20 12:57:43 +00:00			`max-redirects: 2`
templateman update 2023-10-14 11:27:55 +00:00
Fixing gitlab-detect 2021-03-24 10:17:13 +00:00			`matchers-condition: and`
Gitlab Detect Fingerprinting Gitlab can help the hacker in multiple ways, Sometimes hackers can find the signup or explore option open and using these he can escalate the access further. 2020-04-07 10:08:21 +00:00			`matchers:`
			`- type: word`
			`words:`
Fixing gitlab-detect 2021-03-24 10:17:13 +00:00			`- 'GitLab'`
			`- 'https://about.gitlab.com'`
Update gitlab-detect.yaml (#8240) * Update gitlab-detect.yaml Fix false positive * Update gitlab-detect.yaml --------- Co-authored-by: Dhiyaneshwaran <leedhiyanesh@gmail.com> 2023-09-22 10:36:24 +00:00			`condition: and`
Fixing gitlab-detect 2021-03-24 10:17:13 +00:00
			`- type: status`
			`status:`
Added technology tags (#3470) 2022-01-03 16:06:23 +00:00			`- 200`
Auto Template Signing [Tue Mar 26 08:05:25 UTC 2024] :robot: 2024-03-26 08:05:26 +00:00			`# digest: 4a0a00473045022100d56a92dde2aacda701c500b2de34069d556cd1fdc051721b14af032e284b693402207b0942e665c7d497fca1f70f6b0bf6e9c686b1e2d976816d88facae679e1f7aa:922c64590222798bb761d5b6d8e72950`