Created gitlab-enum.yaml

This template is designed to identify accessible GitLab instances by checking the availability of two key endpoints: /explore and /api/v4/projects. It performs HTTP GET requests to these endpoints and validates that they return a status code of 200, indicating that the endpoints are operational.
patch-12
evilgensec 2024-10-05 09:56:57 +05:45 committed by GitHub
parent e9b97ede24
commit 69b78f17b0
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 31 additions and 0 deletions

View File

@ -0,0 +1,31 @@
id: gitlab-enum
info:
name: GitLab Instance Explore and API Check
author: Sujal Tuladhar
severity: info
description: |
This template checks for GitLab instances by verifying if /explore and /api/v4/projects endpoints are accessible with a 200 response.
tags: gitlab, api
requests:
- method: GET
path:
- "{{BaseURL}}/explore"
matchers:
- type: status
status:
- 200
extractors:
- type: regex
part: body
regex:
- "(?i)explore GitLab"
- method: GET
path:
- "{{BaseURL}}/api/v4/projects"
matchers:
- type: status
status:
- 200