nuclei-templates/http/exposed-panels/gitlab-detect.yaml

id: gitlab-detect

info:
  name: Gitlab Login Panel - Detect
  author: ehsahil
  severity: info
  description: Gitlab login panel was detected.
  classification:
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
    cvss-score: 0.0
    cwe-id: CWE-200
  metadata:
    max-request: 1
    shodan-query: http.title:"GitLab"
  tags: panel,gitlab

http:
  - method: GET
    path:
      - "{{BaseURL}}/users/sign_in"

    host-redirects: true
    max-redirects: 2
    matchers-condition: and
    matchers:
      - type: word
        words:
          - 'GitLab'
          - 'https://about.gitlab.com'
        condition: and

      - type: status
        status:
          - 200
:abcd: Justifying id's 2020-09-01 02:25:25 +00:00			`id: gitlab-detect`
Gitlab Detect Fingerprinting Gitlab can help the hacker in multiple ways, Sometimes hackers can find the signup or explore option open and using these he can escalate the access further. 2020-04-07 10:08:21 +00:00
			`info:`
Dashboard Content Enhancements (#6105) Dashboard Content Enhancements 2022-11-19 01:50:30 +00:00			`name: Gitlab Login Panel - Detect`
Gitlab Detect Fingerprinting Gitlab can help the hacker in multiple ways, Sometimes hackers can find the signup or explore option open and using these he can escalate the access further. 2020-04-07 10:08:21 +00:00			`author: ehsahil`
uniform severity update 2020-08-03 21:52:00 +00:00			`severity: info`
Dashboard Content Enhancements (#6105) Dashboard Content Enhancements 2022-11-19 01:50:30 +00:00			`description: Gitlab login panel was detected.`
			`classification:`
			`cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N`
			`cvss-score: 0.0`
			`cwe-id: CWE-200`
GitLab metadata update 2022-03-02 07:35:29 +00:00			`metadata:`
Added max request counter of each template 2023-04-28 08:11:21 +00:00			`max-request: 1`
GitLab metadata update 2022-03-02 07:35:29 +00:00			`shodan-query: http.title:"GitLab"`
Added technology tags (#3470) 2022-01-03 16:06:23 +00:00			`tags: panel,gitlab`
Gitlab Detect Fingerprinting Gitlab can help the hacker in multiple ways, Sometimes hackers can find the signup or explore option open and using these he can escalate the access further. 2020-04-07 10:08:21 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2023-04-27 04:28:59 +00:00			`http:`
Gitlab Detect Fingerprinting Gitlab can help the hacker in multiple ways, Sometimes hackers can find the signup or explore option open and using these he can escalate the access further. 2020-04-07 10:08:21 +00:00			`- method: GET`
			`path:`
			`- "{{BaseURL}}/users/sign_in"`
severity updates 2020-09-20 12:57:43 +00:00
Using "host-redirects" instead of "redirects" to avoid scanning 3rd party / out of scope hosts. (#5491) 2022-10-07 21:27:25 +00:00			`host-redirects: true`
severity updates 2020-09-20 12:57:43 +00:00			`max-redirects: 2`
Fixing gitlab-detect 2021-03-24 10:17:13 +00:00			`matchers-condition: and`
Gitlab Detect Fingerprinting Gitlab can help the hacker in multiple ways, Sometimes hackers can find the signup or explore option open and using these he can escalate the access further. 2020-04-07 10:08:21 +00:00			`matchers:`
			`- type: word`
			`words:`
Fixing gitlab-detect 2021-03-24 10:17:13 +00:00			`- 'GitLab'`
			`- 'https://about.gitlab.com'`
Update gitlab-detect.yaml (#8240) * Update gitlab-detect.yaml Fix false positive * Update gitlab-detect.yaml --------- Co-authored-by: Dhiyaneshwaran <leedhiyanesh@gmail.com> 2023-09-22 10:36:24 +00:00			`condition: and`
Fixing gitlab-detect 2021-03-24 10:17:13 +00:00
			`- type: status`
			`status:`
Added technology tags (#3470) 2022-01-03 16:06:23 +00:00			`- 200`