Merge pull request #8900 from projectdiscovery/princechaddha-patch-1

Update gitlab-public-signup.yaml
patch-1
Dhiyaneshwaran 2024-01-04 00:03:35 +05:30 committed by GitHub
commit ebe329b0a9
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 3 additions and 39 deletions

View File

@ -1,38 +0,0 @@
id: gitlab-public-registration
info:
name: GitLab public registration of new user - Detect
author: axrk
severity: info
metadata:
max-request: 1
shodan-query: http.title:"GitLab"
tags: gitlab,misconfig
http:
- method: GET
path:
- "{{BaseURL}}/users/sign_up"
matchers-condition: and
matchers:
- type: word
words:
- '<span class="gl-button-text">Register</span>'
- 'data-qa-selector="new_user_register_button"'
condition: or
- type: word
words:
- 'https://about.gitlab.com'
- type: status
status:
- 200
- type: word
negative: true
words:
- '<meta content="GitLab.com" property="og:description">'
# digest: 490a0046304402204827554d0c5e27a1b7b6a44996c4c0d926d1aa115589544880385745b77c6e5b02201da92f300b8fd99cedf9704418984afcb842b71c0e22e7f9f03f755699b7b8aa:922c64590222798bb761d5b6d8e72950

View File

@ -2,7 +2,7 @@ id: gitlab-public-signup
info: info:
name: GitLab public signup name: GitLab public signup
author: pdteam author: pdteam,axrk
severity: info severity: info
metadata: metadata:
max-request: 1 max-request: 1
@ -13,7 +13,9 @@ http:
- method: GET - method: GET
path: path:
- "{{BaseURL}}/users/sign_in" - "{{BaseURL}}/users/sign_in"
- "{{BaseURL}}/users/sign_up"
stop-at-first-match: true
matchers-condition: and matchers-condition: and
matchers: matchers:
- type: word - type: word