Skip to content

Commit 0cd85cb

Browse files
committed
Correct capitilzation of GitLab
1 parent 878247f commit 0cd85cb

File tree

1 file changed

+9
-10
lines changed

1 file changed

+9
-10
lines changed

modules/auxiliary/scanner/http/gitlab_user_enum.rb

Lines changed: 9 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -15,13 +15,13 @@ class Metasploit3 < Msf::Auxiliary
1515
def initialize(info = {})
1616
super(update_info(
1717
info,
18-
'Name' => 'Gitlab User Enumeration',
18+
'Name' => 'GitLab User Enumeration',
1919
'Description' => "
20-
The Gitlab 'internal' API is exposed unauthenticated on Gitlab. This
20+
The GitLab 'internal' API is exposed unauthenticated on GitLab. This
2121
allows the username for each SSH Key ID number to be retrieved. Users
2222
who do not have an SSH Key cannot be enumerated in this fashion. LDAP
2323
users, e.g. Active Directory users will also be returned. This issue
24-
was fixed in Gitlab v7.5.0 and is present from Gitlab v5.0.0.
24+
was fixed in GitLab v7.5.0 and is present from GitLab v5.0.0.
2525
",
2626
'Author' => 'Ben Campbell',
2727
'License' => MSF_LICENSE,
@@ -34,7 +34,7 @@ def initialize(info = {})
3434

3535
register_options(
3636
[
37-
OptString.new('TARGETURI', [ true, 'Path to Gitlab instance', '/']),
37+
OptString.new('TARGETURI', [ true, 'Path to GitLab instance', '/']),
3838
OptInt.new('START_ID', [true, 'ID number to start from', 0]),
3939
OptInt.new('END_ID', [true, 'ID number to enumerate up to', 50])
4040
], self.class)
@@ -44,7 +44,7 @@ def run_host(_ip)
4444
internal_api = '/api/v3/internal'
4545
check = normalize_uri(target_uri.path, internal_api, 'check')
4646

47-
print_status('Sending gitlab version request...')
47+
print_status('Sending GitLab version request...')
4848
res = send_request_cgi(
4949
'uri' => check
5050
)
@@ -66,12 +66,12 @@ def run_host(_ip)
6666
host: rhost,
6767
port: rport,
6868
ssl: ssl,
69-
info: "Gitlab Version - #{git_version}"
69+
info: "GitLab Version - #{git_version}"
7070
)
7171
elsif res && res.code == 401
72-
fail_with(Failure::NotVulnerable, 'Unable to retrieve Gitlab version...')
72+
fail_with(Failure::NotVulnerable, 'Unable to retrieve GitLab version...')
7373
else
74-
fail_with(Failure::Unknown, 'Unable to retrieve Gitlab version...')
74+
fail_with(Failure::Unknown, 'Unable to retrieve GitLab version...')
7575
end
7676

7777
discover = normalize_uri(target_uri.path, internal_api, 'discover')
@@ -110,12 +110,11 @@ def run_host(_ip)
110110
end
111111

112112
def store_userlist(users, service)
113-
loot = store_loot('gitlab.users', 'text/plain', rhost, users, nil, 'Gitlab Users', service)
113+
loot = store_loot('gitlab.users', 'text/plain', rhost, users, nil, 'GitLab Users', service)
114114
print_good("Userlist stored at #{loot}")
115115
end
116116

117117
def store_username(username, res)
118-
# Should the service be 'Gitlab'?
119118
service = ssl ? 'https' : 'http'
120119
service_data = {
121120
address: rhost,

0 commit comments

Comments
 (0)