id: gitlab-user-enum info: author: Suman_Kar name: GitLab - User Enumeration severity: info reference: https://github.com/danielmiessler/SecLists/blob/master/Usernames/Names/malenames-usa-top1000.txt tags: gitlab,enum,misconfig,fuzz requests: - raw: - | GET /users/{{user}}/exists HTTP/1.1 Host: {{Hostname}} Accept: application/json, text/plain, */* Referer: {{BaseURL}} payloads: user: helpers/wordlists/user-list.txt stop-at-first-match: true matchers-condition: and matchers: - type: regex part: body regex: - "exists.*:true" - type: status status: - 200 - type: word part: header words: - "application/json"