daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
nuclei-templates/http/exposed-panels/gitlab-detect.yaml

36 lines
683 B
YAML
Raw Normal View History

:abcd: Justifying id's
2020-09-01 02:25:25 +00:00
id: gitlab-detect
Gitlab Detect Fingerprinting Gitlab can help the hacker in multiple ways, Sometimes hackers can find the signup or explore option open and using these he can escalate the access further.
2020-04-07 10:08:21 +00:00
info:
Dashboard Content Enhancements (#6105) Dashboard Content Enhancements
2022-11-19 01:50:30 +00:00
name: Gitlab Login Panel - Detect
Gitlab Detect Fingerprinting Gitlab can help the hacker in multiple ways, Sometimes hackers can find the signup or explore option open and using these he can escalate the access further.
2020-04-07 10:08:21 +00:00
author: ehsahil
uniform severity update
2020-08-03 21:52:00 +00:00
severity: info
Dashboard Content Enhancements (#6105) Dashboard Content Enhancements
2022-11-19 01:50:30 +00:00
description: Gitlab login panel was detected.
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
templateman update
2023-10-14 11:27:55 +00:00
cvss-score: 0
Dashboard Content Enhancements (#6105) Dashboard Content Enhancements
2022-11-19 01:50:30 +00:00
cwe-id: CWE-200
GitLab metadata update
2022-03-02 07:35:29 +00:00
metadata:
Added max request counter of each template
2023-04-28 08:11:21 +00:00
max-request: 1
GitLab metadata update
2022-03-02 07:35:29 +00:00
shodan-query: http.title:"GitLab"
Added technology tags (#3470)
2022-01-03 16:06:23 +00:00
tags: panel,gitlab
Gitlab Detect Fingerprinting Gitlab can help the hacker in multiple ways, Sometimes hackers can find the signup or explore option open and using these he can escalate the access further.
2020-04-07 10:08:21 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
2023-04-27 04:28:59 +00:00
http:
Gitlab Detect Fingerprinting Gitlab can help the hacker in multiple ways, Sometimes hackers can find the signup or explore option open and using these he can escalate the access further.
2020-04-07 10:08:21 +00:00
- method: GET
path:
- "{{BaseURL}}/users/sign_in"
severity updates
2020-09-20 12:57:43 +00:00
Using "host-redirects" instead of "redirects" to avoid scanning 3rd party / out of scope hosts. (#5491)
2022-10-07 21:27:25 +00:00
host-redirects: true
severity updates
2020-09-20 12:57:43 +00:00
max-redirects: 2
templateman update
2023-10-14 11:27:55 +00:00
Fixing gitlab-detect
2021-03-24 10:17:13 +00:00
matchers-condition: and
Gitlab Detect Fingerprinting Gitlab can help the hacker in multiple ways, Sometimes hackers can find the signup or explore option open and using these he can escalate the access further.
2020-04-07 10:08:21 +00:00
matchers:
- type: word
words:
Fixing gitlab-detect
2021-03-24 10:17:13 +00:00
- 'GitLab'
- 'https://about.gitlab.com'
Update gitlab-detect.yaml (#8240) * Update gitlab-detect.yaml Fix false positive * Update gitlab-detect.yaml --------- Co-authored-by: Dhiyaneshwaran <leedhiyanesh@gmail.com>
2023-09-22 10:36:24 +00:00
condition: and
Fixing gitlab-detect
2021-03-24 10:17:13 +00:00
- type: status
status:
Added technology tags (#3470)
2022-01-03 16:06:23 +00:00
- 200