id: gitlab-public-repos

info:
  name: GitLab public repositories
  author: ldionmarcil
  severity: info
  reference:
    - https://twitter.com/ldionmarcil/status/1370052344562470922
    - https://github.com/ldionmarcil/gitlab-unauth-parser
  classification:
    cpe: cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
    vendor: gitlab
    product: gitlab
    shodan-query: http.title:"GitLab"
  tags: gitlab,exposure,misconfig,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/api/v4/projects"

    headers:
      Cookie: _gitlab_session=

    matchers-condition: and
    matchers:
      - type: word
        part: header
        words:
          - "Set-Cookie: _gitlab_session="

      - type: word
        part: body
        words:
          - "name_with_namespace"
# digest: 490a00463044022024d68270eaf72a41c28441357882c1b41c798a2d5b8a2e465f0239d2bcff957d0220453c6b758bd03a1340d6265c4e19872e58ef5d80aec6939319d64d7726e82004:922c64590222798bb761d5b6d8e72950