Skip to content

Commit aea95c0

Browse files
committed
Land rapid7#18723, Improve Gitlab fingerprinting
A webpage exists that can be reached without authentication that contains a hash that can be used to determine the approximate version of gitlab running on the endpoint. This PR adds enhances our current GitLab fingerprinting capabilities to include the aforementioned technique.
2 parents e6fb178 + bc4a532 commit aea95c0

File tree

3 files changed

+534
-2
lines changed

3 files changed

+534
-2
lines changed

lib/msf/core/exploit/remote/http/gitlab/rest/v4/version.rb

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,10 @@
11
# -*- coding: binary -*-
22

33
module Msf::Exploit::Remote::HTTP::Gitlab::Rest::V4::Version
4-
# Extracts the Gitlab version information from various sources
4+
# Extracts the Gitlab version information from the authenticated rest endpoint
55
#
66
# @return [String,nil] Gitlab version if found, nil otherwise
7-
def gitlab_version
7+
def gitlab_version_rest
88
res = send_request_cgi({
99
'method' => 'GET',
1010
'uri' => normalize_uri(target_uri.path, '/api/v4/version'),

0 commit comments

Comments
 (0)