Files
nuclei-templates/http/misconfiguration/gitlab/gitlab-public-signup.yaml
2025-10-26 16:17:37 +00:00

43 lines
1.1 KiB
YAML

id: gitlab-public-signup
info:
name: GitLab public signup
author: pdteam,axrk
severity: info
classification:
cpe: cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*
metadata:
max-request: 2
vendor: gitlab
product: gitlab
shodan-query: http.title:"GitLab"
tags: gitlab,misconfig,vuln
http:
- method: GET
path:
- "{{BaseURL}}/users/sign_in"
- "{{BaseURL}}/users/sign_up"
stop-at-first-match: true
matchers-condition: and
matchers:
- type: word
words:
- '<a data-qa-selector="register_link" href="/users/sign_up">Register now</a>'
- 'data-qa-selector="new_user_register_button"'
- type: word
words:
- 'https://about.gitlab.com'
- type: status
status:
- 200
- type: word
negative: true
words:
- '<meta content="GitLab.com" property="og:description">'
# digest: 4a0a00473045022062b8db9baa3d5d313d3ae13c53a7227a7ee19d26050ef100a939cb0ab4cd4157022100d0f23da59efb040286c83a011bbffc59e6af30aeb1b93f8973c1521e4d95ee65:922c64590222798bb761d5b6d8e72950