Files
fscan/webscan/pocs/gitlab-public-repos.yaml

22 lines
494 B
YAML

id: gitlab-public-repos
info:
name: GitLab public repositories
author: ldionmarcil
severity: info
reference:
- https://twitter.com/ldionmarcil/status/1370052344562470922
- https://github.com/ldionmarcil/gitlab-unauth-parser
tags: gitlab,public,repos
created: 2023/07/20
rules:
r0:
request:
method: GET
path: /api/v4/projects
headers:
Cookie: _gitlab_session=
expression: response.body.bcontains(b'name_with_namespace')
expression: r0()