nuclei-templates/vulnerabilities/gitlab/gitlab-user-enumeration.yaml

34 lines
664 B
YAML

id: gitlab-user-enumeration
info:
author: Suman_Kar
name: GitLab - User Enumeration
severity: info
tags: gitlab,enumeration,fuzz
requests:
- payloads:
dlist: helpers/wordlists/user-list.txt
attack: sniper
threads: 50
raw:
- |
GET /users/{{dlist}}/exists HTTP/1.1
Host: {{Hostname}}
Accept-Language: en-US,en;q=0.9
Accept: application/json, text/plain, */*
Referer: {{BaseURL}}
Connection: keep-alive
matchers-condition: and
matchers:
- type: regex
part: body
regex:
- "exists.*:true"
- type: status
status:
- 200